CSRF Vulnerability in wp-d3 Plugin for WordPress
CVE-2016-10946

8.8HIGH

Key Information:

Vendor

Wordpress
Status
WP-d3
Vendor
CVE Published:
13 September 2019

What is CVE-2016-10946?

The wp-d3 plugin for WordPress, prior to version 2.4.1, contains a Cross-Site Request Forgery (CSRF) vulnerability. This flaw could allow unauthorized users to exploit the plugin's features, potentially leading to malicious actions being performed without the user's consent. It's crucial for site administrators to update the plugin to the latest version to mitigate the risk associated with this vulnerability.

References

https://wpvulndb.com/vulnerabilities/8679
x_refsource_MISC
https://wordpress.org/plugins/wp-d3/#developers
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.