Lucene search
PatchstackVULNRICHMENT:CVE-2024-31265HistoryApr 12, 2024 - 12:44 p.m.
CVE-2024-31265 WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability
2024-04-1212:44:25
CWE-352
Patchstack
github.com
1
cross-site request forgery
wordpress
sumo plugin
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Cross-Site Request Forgery (CSRF) vulnerability in SumoMe Sumo.This issue affects Sumo: from n/a through 1.34.
Related
wpvulndb
wpvulndb
Sumo < 1.35 - Cross-Site Request Forgery
2024-04-11 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2024-31265
2024-04-12 13:15:17
cve
cve
CVE-2024-31265
2024-04-12 13:15:17
wordfence
wordfence
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-31265