Lucene search
HistoryJun 22, 2023 - 1:15 p.m.
CVE-2023-32960
cve-2023-32960
cross-site request forgery
updraftplus.com
davidanderson
wordpress backup plugin
sitewide cross-site scripting
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.4%
Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS).
Affected configurations
Node
updraftplusupdraftplusRange≤1.23.3wordpress
Related
cve
cve
CVE-2023-32960
2023-06-22 13:15:10
wpvulndb
wpvulndb
UpdraftPlus < 1.23.4 - CSRF
2023-05-18 00:00:00
cvelist
cvelist
openvas
openvas
WordPress UpdraftPlus Plugin < 1.23.4 CSRF Vulnerability
2023-07-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-06-22 13:15:00
thn
thn
wordfence
wordfence
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.4%
Related for NVD:CVE-2023-32960