Lucene search

YuyudhnPATCHSTACK:6AE691D8B0A3FDCF20E628F5DB91332C

HistoryMay 04, 2023 - 12:00 a.m.

WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

2023-05-0400:00:00

yuyudhn

patchstack.com

wordpress multi rating plugin

cross site request forgery

vulnerable version

owasp top 10

cve-2023-32125

low severity

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

JSON

Software

Multi Rating

Type

Plugin

Vulnerable versions

<= 5.0.6

Fixed in

N/A

OWASP Top 10

A5: Broken Access Control

Classification

Cross Site Request Forgery (CSRF)

CVE

CVE-2023-32125

Patch priority

Low

CVSS severity

Low (4.3)

Developer

Claim ownership

PSID

619f441acc2a

Credits

yuyudhn yuyudhn

Required privilege

Unauthenticated

Published

4 May, 2023

Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners

Node

multi_rating_projectmulti_ratingRange≤5.0.6wordpress

VendorProductVersionCPE
multi_rating_projectmulti_rating*cpe:2.3:a:multi_rating_project:multi_rating:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
multi_rating_project	multi_rating	*	cpe:2.3:a:multi_rating_project:multi_rating::::::wordpress::*

References

www.cve.org/CVERecord?id=CVE-2023-32125

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

JSON

Related for PATCHSTACK:6AE691D8B0A3FDCF20E628F5DB91332C