CVE-2023-31218highCWE-352CWE-79

CVE-2023-31218: falha de alta gravidade em realmag777 WOLF – WordPress Posts Bulk Editor…

WordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WOLF – WordPress Posts Bulk Editor and Manager Professional

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.2%
Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.6 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
realmag777 · WOLF – WordPress Posts Bulk Editor and Manager Professional
CVEs relacionadas — realmag777 WOLF – WordPress Posts Bulk Editor…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-0791MEDIUMWOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing AuthorizationEPSS 0.5%CVE-2023-46152MEDIUMWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-22159HIGHWordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-44990MEDIUMWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-0790MEDIUMWOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request ForgeryEPSS 0.3%CVE-2023-34028MEDIUMWordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%