Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3471

May 2, 2024, 1:27 p.m.

Product(s) Impacted

Button Generator WordPress plugin

before 3.0

Description

The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack

Weaknesses

Date

Published: May 2, 2024, 6:15 a.m.

Last Modified: May 2, 2024, 1:27 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com