Lucene search
Bob MatyasWPVDB-ID:749AE334-B1D1-421E-A04C-35464C961A4AHistoryApr 24, 2024 - 12:00 a.m.
Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
2024-04-2400:00:00
Bob Matyas
wpscan.com
6
base64
encoder
decoder
csrf
vulnerability
plugin
Description The plugin does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
PoC
Make a logged in admin open an HTML file containing the following:
Related
nvd
nvd
CVE-2024-3824
2024-05-15 06:15:14
cvelist
cvelist
CVE-2024-3824 Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
2024-05-15 06:00:05
vulnrichment
vulnrichment
CVE-2024-3824 Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
2024-05-15 06:00:05
cve
cve
CVE-2024-3824
2024-05-15 06:15:14
wpexploit
wpexploit
Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
2024-04-24 00:00:00
wordfence
wordfence
AI Score
6.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:749AE334-B1D1-421E-A04C-35464C961A4A