VDB
BDU%3A2024-02882
BDU%3A2024-02882
PUBLISHED
CVSS 5 MEDIUM
Уязвимость функции admin_notice() плагина ProfilePress системы управления содержимым сайта WordPress, позволяющая нарушителю реализовать CSRF-атаку
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Proper Fraction LLC. | ProfilePress |
Timeline
- Apr 15, 2024 CVE Published
References
- https://wpscan.com/vulnerability/bb861fee-05fb-4512-88a3-93c791a24f43/ url
- https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-user-avatar/profilepress-4131-cross-site-request-forgery-via-admin-notice url
- https://wpmag.ru/2015/nonces-wordpress-security/ url
- https://ru.wordpress.org/plugins/wp-user-avatar/ advisory