CVE-2015-10125CWE-352

WP Ultimate CSV Importer Plugin cross-site request forgery

Medium · published October 5, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.7.3 is able to address this issue. The identifier of the patch is 13c30af721d3f989caac72dd0f56cf0dc40fad7e. It is recommended to upgrade the affected component. The identifier VDB-241317 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-10-05T22:31Z
EPSS history
Timeline
  • 05 OCT 22:31Z
    WP Ultimate CSV Importer Plugin cross-site request forgery
    cvelistv5