Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-3474
HistoryMay 02, 2024 - 6:15 a.m.

CVE-2024-3474

2024-05-0206:15:50
[email protected]
web.nvd.nist.gov
3
wordpress
csrf
vulnerability
attack
admins

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON

The Wow Skype Buttons WordPress plugin before 4.0.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks

Related

wpvulndb 1
cvelist 1
wpexploit 1
vulnrichment 1
cve 1
wpvulndb
wpvulndb
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-11 00:00:00
cvelist
cvelist
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
wpexploit
wpexploit
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-11 00:00:00
vulnrichment
vulnrichment
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
cve
cve
CVE-2024-3474
2024-05-02 06:15:50

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-3474
wpvulndb1cvelist1wpexploit1vulnrichment1cve1