CVE-2024-3481

MEDIUM

Counter Box < 1.2.4 - Counter Deletion via CSRF

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-3481 has a selected CVSS score of 5.2 (medium).

Description

The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 2, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Counter Box

Default status: unaffected

CVE ListBefore 1.2.4affected

counter_box

Browse wordpress / counter_box

Default status: unknown

CVE List- to < 1.2.4affected

References

2