Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4318
HistorySep 11, 2023 - 8:15 p.m.

Cross site request forgery (csrf)

2023-09-1120:15:00
PRIOn knowledge base
www.prio-n.com
1
wordpress
plugin
csrf
protection
item deletion
attackers
admins
effects

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrary effects via a CSRF attack

CPENameOperatorVersion
herd_effectslt5.2.4

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2023-4318