← volver
CVE-2024-3477

Popup Box < 2.2.7 - Popup Deletion via CSRF

CVSS 4.3 MEDIUMEPSS 0.3%CWE-352
The Popup Box WordPress plugin before 2.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting popups via CSRF attacks
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Productos afectados
Unknown · Popup Box

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →