Vektor Inc Vk Block Patterns vulnerabilities

1 vulnerability

Known vulnerabilities in Vektor Inc Vk Block Patterns, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3MediumCVE-2024-0623vektor-inc · vk_block_patterns +1 moreVK Block Patterns <= 1.31.1.1 - Cross-Site Request ForgeryThe VK Block Patterns plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.31.1.1. This is due to missing or incorrect nonce validation on the vbp_clear_patterns_cache() function. This makes it possible for unauthenticated attackers to clear the patterns cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.EPSS0.67%