Vulnerability Details CVE-2024-3824
The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.4%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2024-3824
-
cpe:2.3:a:mranderson:base64_encoder/decoder:-
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.6
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.6.1
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.7
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.7.1
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.8
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.8.2
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.8.5
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.9
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.9.1
-
cpe:2.3:a:mranderson:base64_encoder/decoder:0.9.2