CSRF Vulnerability in AppPresser Team AppPresser
CVE-2024-31374

8.8HIGH

Key Information:

Vendor

WordPress
Status
Apppresser
Vendor
CVE Published:
15 April 2024

What is CVE-2024-31374?

A Cross-Site Request Forgery (CSRF) vulnerability exists in AppPresser, impacting various versions up to 4.3.0. This security flaw allows an attacker to exploit the affected application by tricking users into executing unwanted actions without their consent. It is crucial for users and administrators to implement necessary security measures to mitigate the risks associated with such vulnerabilities.

Affected Version(s)

AppPresser <= 4.3.0

References

https://patchstack.com/database/vulnerability/apppresser/...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.