CVE-2023-6292
published 2024-01-16CVE-2023-6292: The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could allow attackers to…
PriorityP416medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.22%
12.0th percentile
The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome_chrome | — | — | |
| lightspeedhq | ecwid_ecommerce_shopping_cart | < 6.12.5 | 6.12.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wmg5-vm74-qqx4: The Ecwid Ecommerce Shopping Cart WordPress plugin before 6
ghsa_unreviewed·2024-01-16
CVE-2023-6292 [MEDIUM] CWE-352 GHSA-wmg5-vm74-qqx4: The Ecwid Ecommerce Shopping Cart WordPress plugin before 6
The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Chrome
Stable Channel Update for Desktop: CVE-2024-6290
vendor_chrome·2024-06-24·CVSS 8.8
CVE-2024-6290 [HIGH] Stable Channel Update for Desktop: CVE-2024-6290
Stable Channel Update for Desktop
CVE-2024-6290: Use after free in Dawn. Reported by wgslfuzz on 2024-05-23 [$4000][ 40942995 ] High CVE-2024-6291: Use after free in Swiftshader
Reported by Cassidy Kim(@cassidy6564) on 2023-11-15 [TBD][ 342545100 ] High CVE-2024-6292: Use after free in Dawn
Severity: high
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-01-16
Published