Lucene search

K
nvd[email protected]NVD:CVE-2024-3629
HistoryMay 15, 2024 - 6:15 a.m.

CVE-2024-3629

2024-05-1506:15:12
web.nvd.nist.gov
1
hl twitter
wordpress plugin
csrf attack
admin change
security vulnerability

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%