CVE-2020-9394: CSRF
Published Feb 25, 2020
·Updated
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.
Affected Software
1 affected component
Supsystic Pricing Table By Supsystic Wordpress<1.8.2
Event History
Feb 25, 2020
CVE Published
via MITRE·06:07 PM
Data Sourced
via MITRE·06:07 PM
DescriptionSeverity
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerable software?
The vulnerable software is Supsystic Pricing Table By Supsystic plugin for WordPress.
2
What version of the plugin is affected?
Versions up to and excluding 1.8.2 of the Supsystic Pricing Table By Supsystic plugin are affected.
3
What is the severity of CVE-2020-9394?
The severity of CVE-2020-9394 is high (CVSS score: 8.8).
4
What is the CWE category of CVE-2020-9394?
The CWE category of CVE-2020-9394 is CWE-352 (Cross-Site Request Forgery).
5
How can I fix CVE-2020-9394?
To fix CVE-2020-9394, update the Supsystic Pricing Table By Supsystic plugin to version 1.8.2 or newer.