CVE-2024-31430mediumCWE-352

CVE-2024-31430: falha de média gravidade em realmag777 WOLF – WordPress Posts Bulk Editor…

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net+ Monitorar WOLF – WordPress Posts Bulk Editor and Manager Professional

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.1; BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net: from n/a through 1.1.4.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
realmag777 · BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Netrealmag777 · WOLF – WordPress Posts Bulk Editor and Manager Professional
CVEs relacionadas — realmag777 WOLF – WordPress Posts Bulk Editor…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4941MEDIUMBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationEPSS 0.6%CVE-2023-4943MEDIUMBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationEPSS 0.6%CVE-2023-4938MEDIUMBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationEPSS 0.5%CVE-2024-0791MEDIUMWOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing AuthorizationEPSS 0.5%CVE-2023-4920MEDIUMBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.4%CVE-2023-46152MEDIUMWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%