CVE-2024-29009 - Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in

Published Mar 25, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

Cross-site request forgery (CSRF) vulnerability in easy-popup-show all versions allows a remote unauthenticated attacker to hijack the authentication of the administrator and to perform unintended operations if the administrator views a malicious page while logged in.

Affected products

Vendor Ari Susanto Product Easy-Popup-Show Default
unknown
Affected
- all versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Ari Susanto	Easy-Popup-Show	unknown	Affected all versions

Vendor Arisusanto Product Easy-Popup-Show Default
unknown
Affected
- 0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Arisusanto	Easy-Popup-Show	unknown	Affected 0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-26071		Advisory
https://jvn.jp/en/jp/JVN86206017/
https://wordpress.org/plugins/easy-popup-show/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Mar 25, 2024

Updated Aug 27, 2024

Reserved Mar 14, 2024

Link CVE-2024-29009

CISA Vulnrichment

Updated Mar 26, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-29009

Red Hat

No data

ENISA EUVD

Assigner jpcert

Published Mar 25, 2024

Updated Aug 27, 2024

Link EUVD-2024-26071

GitHub

No data