The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/1f941d51-1eaf-424a-95b8-ccaa3fdd339b/ | Exploit Third Party Advisory |
Configurations
History
07 Oct 2024, 15:56
Type | Values Removed | Values Added |
---|---|---|
References | () https://wpscan.com/vulnerability/1f941d51-1eaf-424a-95b8-ccaa3fdd339b/ - Exploit, Third Party Advisory | |
First Time |
Digireturn
Digireturn dn Popup |
|
CWE | CWE-352 | |
CPE | cpe:2.3:a:digireturn:dn_popup:*:*:*:*:*:wordpress:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
03 Sep 2024, 14:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
03 Sep 2024, 12:59
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
02 Sep 2024, 08:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-02 08:15
Updated : 2024-10-07 15:56
NVD link : CVE-2024-7690
Mitre link : CVE-2024-7690
CVE.ORG link : CVE-2024-7690
JSON object : View
Products Affected
digireturn
- dn_popup
CWE
CWE-352
Cross-Site Request Forgery (CSRF)