Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-3642
HistoryMay 16, 2024 - 6:15 a.m.

CVE-2024-3642

2024-05-1606:15:09
[email protected]
web.nvd.nist.gov
2
wordpress
csrf attack
subscriber deletion

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

JSON

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting subscriber, which could allow attackers to make logged in admins perform such action via a CSRF attack

Related

cve 1
cvelist 1
vulnrichment 1
wpvulndb 1
wpexploit 1
cve
cve
CVE-2024-3642
2024-05-16 06:15:09
cvelist
cvelist
CVE-2024-3642 Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
2024-05-16 06:00:02
vulnrichment
vulnrichment
CVE-2024-3642 Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
2024-05-16 06:00:02
wpvulndb
wpvulndb
Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
2024-04-25 00:00:00
wpexploit
wpexploit
Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF
2024-04-25 00:00:00

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-3642
cve1cvelist1vulnrichment1wpvulndb1wpexploit1