Lucene search
WPScanCVE-2024-3474HistoryMay 02, 2024 - 6:15 a.m.
CVE-2024-3474
2024-05-0206:15:50
WPScan
web.nvd.nist.gov
29
cve-2024-3474
csrf checks
bulk actions
logged in admins
unwanted actions
deleting buttons
wordpress plugin
The Wow Skype Buttons WordPress plugin before 4.0.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
Affected configurations
Node
wow-companywow_skype_buttonsRange<4.0.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wow-company | wow_skype_buttons | * | cpe:2.3:a:wow-company:wow_skype_buttons:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "Unknown",
"product": "Wow Skype Buttons",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "4.0.4"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
wpvulndb
wpvulndb
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-11 00:00:00
nvd
nvd
CVE-2024-3474
2024-05-02 06:15:50
vulnrichment
vulnrichment
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
wpexploit
wpexploit
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-11 00:00:00