Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-3643
HistoryMay 16, 2024 - 6:15 a.m.

CVE-2024-3643

2024-05-1606:15:10
[email protected]
web.nvd.nist.gov
wordpress
plugin
csrf
vulnerability
cve-2024-3643

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack

Related

wpvulndb 1
cve 1
cvelist 1
wpexploit 2
wpvulndb
wpvulndb
Newsletter Popup <= 1.2 - List Deletion via CSRF
2024-04-25 00:00:00
cve
cve
CVE-2024-3643
2024-05-16 06:15:10
cvelist
cvelist
CVE-2024-3643 Newsletter Popup <= 1.2 - List Deletion via CSRF
2024-05-16 06:00:02
wpexploit
wpexploit
Newsletter Popup <= 1.2 - List Deletion via CSRF
2024-04-25 00:00:00
Newsletter Popup <= 1.2 - List Deletion via CSRF
2024-04-25 00:00:00

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for NVD:CVE-2024-3643
wpvulndb1cve1cvelist1wpexploit2