Description
The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
Published: 2024-04-15
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-27684 The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
History

Thu, 08 May 2025 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Mndpsingh287
Mndpsingh287 advanced Search
Weaknesses CWE-352
CPEs cpe:2.3:a:mndpsingh287:advanced_search:*:*:*:*:*:wordpress:*:*
Vendors & Products Mndpsingh287
Mndpsingh287 advanced Search

Thu, 20 Mar 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Mndpsingh287 Advanced Search
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2025-03-20T19:02:32.490Z

Reserved: 2024-03-20T13:57:15.690Z

Link: CVE-2024-2739

cve-icon Vulnrichment

Updated: 2024-08-01T19:25:41.190Z

cve-icon NVD

Status : Analyzed

Published: 2024-04-15T05:15:15.220

Modified: 2026-06-17T07:25:27.080

Link: CVE-2024-2739

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-352

    Cross-Site Request Forgery (CSRF)