CVE-2023-2010

Katalog CVE

CVSS 3.1 · Low EPSS 0,36%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada incsub forminator. Skor CVSS 3.1 3.1 (Low) menurut NVD.

Deskripsi (NVD)

The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.

Rincian

Terbit di NVD

4 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.1 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/d0da4c0d-622f-4310-a867-6bfdb474073a exploit · advisory pihak ketiga