Cross-Site Request Forgery (CSRF) Vulnerability in Dark Mode for WP Dashboard
CVE-2024-43325

8.8HIGH

Key Information:

Vendor

WordPress
Status
Dark Mode For WP Dashboard
Vendor
CVE Published:
26 August 2024

What is CVE-2024-43325?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Naiche's Dark Mode for WP Dashboard, which compromises the plugin's security. This vulnerability could allow attackers to trick users into executing unwanted actions on their behalf without their consent. Affected versions of the Dark Mode plugin range from n/a to version 1.2.3. It is crucial for users of this plugin to apply the latest security measures or patches to mitigate potential risks associated with this vulnerability.

References

https://patchstack.com/database/vulnerability/dark-mode-f...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.