CVSS 3.1
5.2 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:NCVE-2024-3481
Medium (5.2) in wow-company counter box. EPSS 0.3% chance of exploitation in the next 30 days.
The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wow-company:counter_box