Lucene search
WPScanVULNRICHMENT:CVE-2024-8093HistorySep 17, 2024 - 6:00 a.m.
CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF
2024-09-1706:00:06
WPScan
github.com
1
cve-2024-8093
posts reminder
csrf
settings update
wordpress plugin
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
18.6%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
The Posts reminder WordPress plugin through 0.20 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:lucas_garcia:posts_reminder:*:*:*:*:*:*:*:*"
],
"vendor": "lucas_garcia",
"product": "posts_reminder",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "0.20"
}
],
"defaultStatus": "affected"
}
]Related
cvelist
cvelist
CVE-2024-8093 Posts reminder <= 0.20 - Settings Update via CSRF
2024-09-17 06:00:06
nvd
nvd
CVE-2024-8093
2024-09-17 06:15:02
cve
cve
CVE-2024-8093
2024-09-17 06:15:02
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
18.6%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-8093