CVE-2024-3163

MEDIUM

4.3

Descricao

The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack

Detalhes CVE

Pontuacao CVSS v3.14.3

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado9/12/2024

Ultima modificacao9/26/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

realestateconnected:easy_property_listings

Fraquezas (CWE)

CWE-352CWE-352

Referencias

https://wpscan.com/vulnerability/f89c8654-5486-4939-880d-101f33d359c0/(contact@wpscan.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.