CSRF Vulnerability in WP Client Reports
CVE-2024-32439

8.8HIGH

Key Information:

Vendor
WordPress
Status
WP Client Reports
Vendor
CVE Published:
15 April 2024

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the SwitchWP WP Client Reports plugin, allowing attackers to perform actions on behalf of authenticated users without their consent. This can lead to unauthorized changes or information disclosures, making it critical for users to update to a non-vulnerable version and take necessary precautions to secure their installations.

Affected Version(s)

WP Client Reports <= 1.0.22

References

https://patchstack.com/database/vulnerability/wp-client-r...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joshua Chan (Patchstack Alliance)
.