Lucene search
Bob MatyasWPVDB-ID:E5C3E145-6738-4D85-8507-43CA1B1D5877HistoryApr 11, 2024 - 12:00 a.m.
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-1100:00:00
Bob Matyas
wpscan.com
8
skype buttons
csrf vulnerability
unauthorized deletion
Description The plugin does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
PoC
As an admin open HTML file containing: action
Related
cvelist
cvelist
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
nvd
nvd
CVE-2024-3474
2024-05-02 06:15:50
vulnrichment
vulnrichment
CVE-2024-3474 Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-05-02 06:00:02
cve
cve
CVE-2024-3474
2024-05-02 06:15:50
wpexploit
wpexploit
Wow Skype Buttons < 4.0.4 - Button Deletion via CSRF
2024-04-11 00:00:00
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:E5C3E145-6738-4D85-8507-43CA1B1D5877