Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 8:21 a.m.•13 views

CVE-2024-1362

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...

4.3CVSS5.8AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/23 11:15 a.m.•15 views

CVE-2024-1362

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...

4.3CVSS7.4AI score0.00212EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•3 views

CVE-2024-1362: Cross-Site Request Forgery (CSRF)

The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...

4.3CVSS6.1AI score0.00212EPSS
SaveExploits0References3
Rows per page
Query Builder