Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
patchstackLucio SáPATCHSTACK:1E92F8FEDD389738BF22234908752F86
HistoryFeb 21, 2024 - 12:00 a.m.

WordPress WP Database Reset Plugin <= 3.22 is vulnerable to Cross Site Request Forgery (CSRF)

2024-02-2100:00:00
Lucio Sá
patchstack.com
1
wordpress
database reset plugin
cross site request forgery
vulnerability
owasp top 10
cve-2024-1501
low severity
webfactory ltd.

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

6.6

Confidence

Low

JSON

Software

WP Database Reset

Type

Plugin

Vulnerable versions

<= 3.22

Fixed in

3.23

OWASP Top 10

A5: Broken Access Control

Classification

Cross Site Request Forgery (CSRF)

CVE

CVE-2024-1501

Patch priority

Low

CVSS severity

Low (4.7)

Developer

WebFactory Ltd.

PSID

c53221c813e9

Credits

Lucio Sá

Required privilege

Unauthenticated

Published

21 February, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
webfactory_ltdwp_database_resetRange≤3.22
VendorProductVersionCPE
webfactory_ltdwp_database_reset*cpe:2.3:a:webfactory_ltd:wp_database_reset:*:*:*:*:*:*:*:*

Related

prion 1
vulnrichment 1
cve 1
cvelist 1
wpvulndb 1
nvd 1
wordfence 1
prion
prion
Cross site request forgery (csrf)
2024-02-21 04:15:00
vulnrichment
vulnrichment
CVE-2024-1501
2024-02-21 03:36:00
cve
cve
CVE-2024-1501
2024-02-21 04:15:07
cvelist
cvelist
CVE-2024-1501
2024-02-21 03:36:00
wpvulndb
wpvulndb
Database Reset < 3.23 - Cross-Site Request Forgery to WP Reset Plugin Installation
2024-02-20 00:00:00
nvd
nvd
CVE-2024-1501
2024-02-21 04:15:07
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (February 19, 2024 to February 25, 2024)
2024-02-29 17:09:15

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

AI Score

6.6

Confidence

Low

JSON
Related for PATCHSTACK:1E92F8FEDD389738BF22234908752F86
prion1vulnrichment1cve1cvelist1wpvulndb1nvd1wordfence1