Lucene search

K
nvd[email protected]NVD:CVE-2024-3971
HistoryJun 14, 2024 - 6:15 a.m.

CVE-2024-3971

2024-06-1406:15:12
web.nvd.nist.gov
3
similarity wordpress plugin
csrf vulnerability
admin reset
csrf attack

0.0004 Low

EPSS

Percentile

9.1%

The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

0.0004 Low

EPSS

Percentile

9.1%