CVE-2017-8099 - CERT CVE

  1. CVE-2017-8099

ID CVE-2017-8099
Sažetak There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.
Reference
CVSS
Base: 5.8
Impact: 4.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:N/AC:M/Au:N/C:N/I:P/A:P
Zadnje važnije ažuriranje 28-04-2017 - 17:48
Objavljeno 24-04-2017 - 18:59