Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2024/05/02 6:00 a.m.•43 views

CVE-2024-3471 Button Generator < 3.0 - Button Deletion via CSRF

The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack...

6.6AI score0.00229EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•2 views

CVE-2024-3471: Cross-Site Request Forgery (CSRF)

The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack...

3.4CVSS5.8AI score0.00229EPSS
SaveExploits2References1
Wired Threat Level
Wired Threat Level
•added 2020/06/02 2:00 p.m.•30 views

Facebook 'Manage Activity' Is a Long Overdue Privacy Feature

The new Manage Activity feature will let you archive and bulk delete posts for the first time...

3AI score
SaveExploits0
Rows per page
Query Builder