CVSS 3.1
3.4 lowCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:NCVE-2024-3471
Low (3.4) in wow-company button generator. EPSS 0.2% chance of exploitation in the next 30 days.
The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wow-company:button_generator