CVE-2024-3478: Herd Effects < 5.2.7 - Effect Deletion via CSRF
Published May 2, 2024
·Updated
The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting effects via CSRF attacks
Affected Software
2 affected components
Herd Effects Herd Effects<5.2.7
Wow-Company Herd Effects WordPress<5.2.7
Event History
May 2, 2024
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-3478?
CVE-2024-3478 has a moderate severity rating due to the potential for unauthorized actions by attackers.
2
How do I fix CVE-2024-3478?
To fix CVE-2024-3478, update the Herd Effects WordPress plugin to version 5.2.7 or later.
3
What actions are vulnerable in CVE-2024-3478?
CVE-2024-3478 allows attackers to exploit CSRF vulnerabilities in certain bulk actions of the Herd Effects plugin.
4
Who is affected by CVE-2024-3478?
All users of the Herd Effects WordPress plugin prior to version 5.2.7 are affected by CVE-2024-3478.
5
What type of attack does CVE-2024-3478 facilitate?
CVE-2024-3478 facilitates Cross-Site Request Forgery (CSRF) attacks that can result in unwanted actions by logged-in admins.