CVE-2015-10109CWE-352

Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery

Medium · published June 1, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.137 is able to address this issue. The name of the patch is ee28e91f4d5404905204c43b7b84a8ffecad932e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230264.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-06-01T13:00Z
EPSS history
Timeline
  • 01 JUN 13:00Z
    Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery
    cvelistv5