PT-2024-34787 · WordPress · Amazon Associate Filter

Soprobro · Published 2024-11-19 · Updated 2024-11-23 · CVE-2024-51643

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Amazon Associate Filter versions 0.4 and earlier

Description A Cross-Site Request Forgery (CSRF) vulnerability allows Stored XSS attacks. This issue affects the Amazon Associate Filter plugin for WordPress. Remediation is crucial to safeguard sites.

Recommendations Update the Amazon Associate Filter plugin to the latest version to protect your site. As a temporary workaround, consider disabling the plugin until a patch is available.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-51643

Affected Products

Amazon Associate Filter

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-51643 · Security Note
• https://patchstack.com/database/vulnerability/amazon-associate-filter/wordpress-amazon-associate-filter-plugin-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/amazon-associate-filter/vulnerability/wordpress-amazon-associate-filter-plugin-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1860186608189767975 · Twitter Post
• https://twitter.com/CVEnew/status/1858914916687581693 · Twitter Post
• https://twitter.com/transilienceai/status/1860186621724758471 · Twitter Post