The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those they don't have access to via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/62c8a564-225e-4202-9bb0-03029fa4fd42/ | Exploit Third Party Advisory |
Configurations
History
03 Jul 2024, 18:27
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-352 | |
First Time |
2code
2code himer |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
References | () https://wpscan.com/vulnerability/62c8a564-225e-4202-9bb0-03029fa4fd42/ - Exploit, Third Party Advisory | |
CPE | cpe:2.3:a:2code:himer:*:*:*:*:*:wordpress:*:* |
03 Jul 2024, 12:53
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
03 Jul 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-03 06:15
Updated : 2024-07-08 14:18
NVD link : CVE-2024-2235
Mitre link : CVE-2024-2235
CVE.ORG link : CVE-2024-2235
JSON object : View
Products Affected
2code
- himer
CWE
CWE-352
Cross-Site Request Forgery (CSRF)