Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Modal Window WordPress plugin

before 5.3.10

Source

contact@wpscan.com

CVE-2024-3472 details

Published : May 2, 2024, 6:15 a.m.
Last Modified : May 2, 2024, 1:27 p.m.

Description

The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://wpscan.com/vulnerability/d42f74dd-520f-40aa-9cf0-3544db9562c7/	contact@wpscan.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-3472