Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-3475
HistoryMay 02, 2024 - 6:15 a.m.

CVE-2024-3475

2024-05-0206:15:50
[email protected]
web.nvd.nist.gov
2
wordpress
plugin
csrf
vulnerability
bulk actions
admin
deletion

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON

The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks

Related

wpvulndb 1
cvelist 1
vulnrichment 1
wpexploit 1
cve 1
wordfence 1
wpvulndb
wpvulndb
Sticky Buttons < 3.2.4 - Button Deletion via CSRF
2024-04-11 00:00:00
cvelist
cvelist
CVE-2024-3475 Sticky Buttons < 3.2.4 - Button Deletion via CSRF
2024-05-02 06:00:02
vulnrichment
vulnrichment
CVE-2024-3475 Sticky Buttons < 3.2.4 - Button Deletion via CSRF
2024-05-02 06:00:02
wpexploit
wpexploit
Sticky Buttons < 3.2.4 - Button Deletion via CSRF
2024-04-11 00:00:00
cve
cve
CVE-2024-3475
2024-05-02 06:15:50
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)
2024-04-18 15:58:54

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.0%

JSON
Related for NVD:CVE-2024-3475
wpvulndb1cvelist1vulnrichment1wpexploit1cve1wordfence1