Lucene search
HistoryJul 22, 2024 - 6:15 a.m.
CVE-2024-6271
community events
wordpress
csrf
vulnerability
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
EPSS
0.001
Percentile
17.5%
The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make a logged in admin delete arbitrary events via a CSRF attack
Affected configurations
Node
community_events_projectcommunity_eventsRange<1.5wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| community_events_project | community_events | * | cpe:2.3:a:community_events_project:community_events:*:*:*:*:*:wordpress:*:* |
Related
vulnrichment
vulnrichment
CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF
2024-07-22 06:00:06
cve
cve
CVE-2024-6271
2024-07-22 06:15:02
cvelist
cvelist
CVE-2024-6271 Community Events < 1.5 - Event Deletion via CSRF
2024-07-22 06:00:06
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
EPSS
0.001
Percentile
17.5%
Related for NVD:CVE-2024-6271