Lucene search
HistoryMar 25, 2024 - 5:15 a.m.
CVE-2024-1962
wordpress
plugin
csrf
vulnerability
attack
admin
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack
Related
vulnrichment
vulnrichment
CVE-2024-1962 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-25 05:00:02
cve
cve
CVE-2024-1962
2024-03-25 05:15:50
cvelist
cvelist
CVE-2024-1962 CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-25 05:00:02
wpvulndb
wpvulndb
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-04 00:00:00
wpexploit
wpexploit
CM Download and File Manager < 2.9.1 - Download Edit via CSRF
2024-03-04 00:00:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-1962