CVE-2024-5167

Katalog CVE

CVSS 8.1 · High EPSS 0,30%

Kerentanan Cross-Site Request Forgery (CSRF) pada cminds cm e-mail blacklist. Skor CVSS 3.1 8.1 (High) menurut CISA ADP.

Deskripsi (NVD)

The CM Email Registration Blacklist and Whitelist WordPress plugin before 1.4.9 does not have CSRF check when adding or deleting an item from the blacklist or whitelist, which could allow attackers to make a logged in admin add or delete settings from the blacklist or whitelist menu via a CSRF attack

Rincian

Terbit di NVD

13 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/67bb5ab8-4493-4f5b-a989-41576675b61a/ exploit · advisory pihak ketiga