CVE-2023-2842

WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF

published June 27, 2023

CVSS
—
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Published
2023-06-27T13:17Z
EPSS history
Timeline
  • 27 JUN 13:17Z
    WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF
    cvelistv5