CVE-2024-8286 in GDPR Cookie Consent Plugin信息

摘要

由 MITRE • 2025-05-16

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting visit logs via CSRF attacks

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2024-08-28

披露

2025-05-16

管理

已接受

条目

VDB-301122

CPE

准备好

CWE

CWE-352 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.00182

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-8286
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-8286
CVE Details	https://www.cvedetails.com/cve/CVE-2024-8286/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!