Cross-Site Request Forgery Vulnerability in VolThemes Patricia Blog
CVE-2024-38732

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Patricia Blog
Vendor
CVE Published:
2 January 2025

What is CVE-2024-38732?

A Cross-Site Request Forgery (CSRF) vulnerability in VolThemes Patricia Blog enables attackers to forge requests on behalf of authenticated users without their consent. This security flaw potentially allows malicious entities to manipulate user sessions and perform unauthorized actions, jeopardizing sensitive information and system integrity. Users of Patricia Blog from version n/a up to 1.2 must take appropriate measures to mitigate the risks associated with this vulnerability, ensuring the safety of their web applications.

Affected Version(s)

Patricia Blog <= 1.2

References

https://patchstack.com/database/wordpress/theme/patricia-...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dhabaleshwar Das (Patchstack Alliance)
.
CVE-2024-38732 : Cross-Site Request Forgery Vulnerability in VolThemes Patricia Blog