Lucene search

PatchstackCVE-2023-34013

HistoryNov 13, 2023 - 3:15 a.m.

CVE-2023-34013

2023-11-1303:15:08

CWE-918

Patchstack

web.nvd.nist.gov

cve-2023-34013

ssrf

vulnerability

poll maker

wordpress

plugin

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.2%

JSON

Server-Side Request Forgery (SSRF) vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2.

Affected configurations

Nvd

Vulners

Node

ays-propoll_makerRange≤4.6.2wordpress

VendorProductVersionCPE
ays-propoll_maker*cpe:2.3:a:ays-pro:poll_maker:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
ays-pro	poll_maker	*	cpe:2.3:a:ays-pro:poll_maker::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "poll-maker",
    "product": "Poll Maker – Best WordPress Poll Plugin",
    "vendor": "Poll Maker Team",
    "versions": [
      {
        "changes": [
          {
            "at": "4.6.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.6.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/poll-maker/wordpress-poll-maker-plugin-4-6-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.2%

JSON

Related for CVE-2023-34013