Lucene search

K
patchstackSOPROBROPATCHSTACK:1AAA7B474150F1837ADFF8F0DAF6981B
HistoryOct 18, 2024 - 12:00 a.m.

WordPress WordPress Image SEO Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

2024-10-1800:00:00
SOPROBRO
patchstack.com
1
wordpress image seo
plugin
cross site request forgery
cve-2024-49627
low severity

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.1%

Software

WordPress Image SEO

Type

Plugin

Vulnerable versions

<= 1.1.4

Fixed in

N/A

OWASP Top 10

A1: Broken Access Control

Classification

Cross Site Request Forgery (CSRF)

CVE

CVE-2024-49627

Patch priority

Low

CVSS severity

Low (4.3)

Developer

Claim ownership

PSID

4ac99c737309

Credits

SOPROBRO SOPROBRO

Required privilege

Unauthenticated

Published

18 October, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
-wordpress_image_seoRange1.1.4
VendorProductVersionCPE
-wordpress_image_seo*cpe:2.3:a:-:wordpress_image_seo:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.1%

Related for PATCHSTACK:1AAA7B474150F1837ADFF8F0DAF6981B