Lucene search

K
nvd[email protected]NVD:CVE-2024-3631
HistoryMay 15, 2024 - 6:15 a.m.

CVE-2024-3631

2024-05-1506:15:13
web.nvd.nist.gov
4
hl twitter wordpress
csrf attack
cve-2024-3631
admin permissions
security vulnerability

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check when unlinking twitter accounts, which could allow attackers to make logged in admins perform such actions via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%