Orta CVSS 4.3
CVE-2026-86611: CVE-2026-86611: siteler arası istek sahteciliği (CSRF)
Açıklama (NVD)
The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places, allowing attackers to make a logged in admin update its privacy and storage settings via a crafted link, including the credential that gates its unauthenticated maintenance endpoint.
Özet bilgiler
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - EPSS
- %0,13 (yüzdelik 3)
- CWE
- CWE-352
- Yama
- Yok / bilinmiyor