Lucene search
HistoryJan 05, 2024 - 9:15 a.m.
CVE-2023-52149
cross-site request forgery
wow-company
floating button
vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
24.1%
Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Floating Button.This issue affects Floating Button: from n/a through 6.0.
Affected configurations
Node
wow-companyfloating_buttonRange≤6.0wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| wow-company | floating_button | * | cpe:2.3:a:wow-company:floating_button:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2024-01-05 09:15:00
wpvulndb
wpvulndb
Floating Button < 6.0.1 - Cross-Site Request Forgery via process_bulk_action
2024-01-04 00:00:00
cve
cve
CVE-2023-52149
2024-01-05 09:15:10
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-52149