CVE-2024-3472 Modal Window < 5.3.10 - Modal Deletion via CSRF

2024-05-0206:00:02

WPScan

github.com

cve-2024-3472

wordpress

csrf

deletion

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wordpress_scan:Modal_window:*:*:*:*:*:*:*:*"
    ],
    "vendor": "wordpress_scan",
    "product": "Modal_window",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ],
    "defaultStatus": "unknown"
  }
]