CVE-2024-32112CWE-352

WordPress Leadinfo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Medium · published April 11, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Leadinfo leadinfo. The patch was released under the same version which was reported as vulnerable. We consider the current version as vulnerable.This issue affects Leadinfo: from n/a through 1.0.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-04-11T12:01Z
EPSS history
Timeline
  • 11 APR 12:01Z
    WordPress Leadinfo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
    cvelistv5