CVE-2023-3977mediumCWE-352

CVE-2023-3977: falha de média gravidade em cl272 Enhanced Text Widget

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BackupBliss – Backup & Migration with Free Cloud Storage+ Monitorar Clone

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.6%
Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for unauthenticated attackers to install plugins from the limited list via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
cl272 · Enhanced Text Widgetcl272 · Ultimate Posts Widgetinisev · BackupBliss – Backup & Migration with Free Cloud Storageinisev · Duplicate Postinisev · Pop-upinisev · Redirectioninisev · Social Media Share Buttons & Social Sharing Iconsinisev · Social Share Icons & Social Share Buttonsmigrate · Clones-feeds · RSS Redirect & Feedburner Alternativesteve85b · SSL Mixed Content Fix
CVEs relacionadas — cl272 Enhanced Text Widget

No mesmo produto, das mais perigosas para as menos.

CVE-2023-6553CRITICALBackup Migration <= 1.3.7 - Unauthenticated Remote Code ExecutionEPSS 97.8%CVE-2023-7002HIGHBackup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via urlEPSS 30.8%CVE-2023-6266HIGHBackup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information ExposureEPSS 2.1%CVE-2023-6972CRITICALBackup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File DeletionEPSS 1.4%CVE-2024-10932HIGHBackup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'EPSS 0.8%CVE-2023-0958MEDIUMInisev Plugins (Various Versions) - Missing Authorization on handle_installation functionEPSS 0.7%