ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-3643
8.8высокая

CVE-2024-3643

Описание

The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack

Затрагиваемое ПО
Mndpsingh287 Newsletter popup
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://wpscan.com/vulnerability/698277e6-56f9-4688-9a84-c2fa3ea9f7dc/https://wpscan.com/vulnerability/698277e6-56f9-4688-9a84-c2fa3ea9f7dc/