CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Vulnrichment•added 2024/03/25 5:00 a.m.•15 views

CVE-2024-1231 CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack...

6.3AI score0.00225EPSS

SaveExploits2References1

Cvelist•added 2024/03/25 5:00 a.m.•28 views

CVE-2024-1231 CM Download and File Manager < 2.9.0 - Download Unpublish via CSRF

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack...

6.6AI score0.00225EPSS

SaveExploits2References1

Rapid7 Vulnerability Database (full)•added 2024/03/25 12:00 a.m.•2 views

CVE-2024-1231: Cross-Site Request Forgery (CSRF)

The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack...

6.8CVSS5.8AI score0.00225EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by