Lucene search
HistoryNov 13, 2023 - 1:15 a.m.
CVE-2023-46625
daext autolinks manager
cross-site request forgery
csrf vulnerability
version 1.10.04
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Autolinks Manager plugin <= 1.10.04 versions.
Affected configurations
Node
daextautolinks_managerRange≤1.10.04wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| daext | autolinks_manager | * | cpe:2.3:a:daext:autolinks_manager:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-46625
2023-11-13 01:15:08
prion
prion
Cross site request forgery (csrf)
2023-11-13 01:15:00
vulnrichment
vulnrichment
wpvulndb
wpvulndb
Autolinks Manager < 1.10.05 - CSRF
2023-11-13 00:00:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-46625