NVD

Id
85044  
Name
CVE-2017-8099  
Description
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-05-07  
Published
2017-04-24  
Modified Date
2017-04-28  
Seq
2017-8099  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414550 85044 CVE-2017-6832 [oss-security] 20170313 Re: audiofile: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp)  View
414551 85044 CVE-2017-6832 https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/  View
414552 85044 CVE-2017-6832 https://github.com/mpruett/audiofile/issues/36  View
414553 85044 CVE-2017-6832 https://github.com/mpruett/audiofile/pull/42  View
414554 85044 CVE-2017-6832 [oss-security] 20170313 Re: audiofile: heap-based buffer overflow in MSADPCM::decodeBlock (MSADPCM.cpp)  View
414555 85044 CVE-2017-6832 https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcmdecodeblock-msadpcm-cpp/  View
414556 85044 CVE-2017-6832 https://github.com/mpruett/audiofile/issues/36  View
414557 85044 CVE-2017-6832 https://github.com/mpruett/audiofile/pull/42  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66474 JVNDB-2017-002812 WordPress 用 WHIZZ プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 WHIZZ プラグインには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2017-8099 0 CVE-2017-8099 85044 5.8 8.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002812.html 2017-04-27 2017-05-01 View