Lucene search
HistoryApr 15, 2024 - 8:15 a.m.
CVE-2024-32431
wp all import
deserialization
vulnerability
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
AI Score
4.8
Confidence
High
EPSS
0
Percentile
9.0%
Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2.
Related
wpvulndb
wpvulndb
Import Users from CSV < 1.3 - Authenticated (Admin+) PHP Object Injection
2024-04-18 00:00:00
cve
cve
CVE-2024-32431
2024-04-15 08:15:15
cvelist
cvelist
vulnrichment
vulnrichment
wordfence
wordfence
CVSS3
4.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
AI Score
4.8
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-32431