CVE-2018-1000506

HIGH 8.8CVE-2018-1000506 · Published 26/06/2018 · updated 17/06/2026

In short

CVE-2018-1000506 is a HIGH (CVSS 8.8) vulnerability affecting metronet tag manager (mediaron).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
metronet tag manager mediaron	`= 1.2.7`	No fix yet

Description

Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must follow a link. This vulnerability appears to have been fixed in 1.2.9.

References

advisories.dxw.com/advisories/csrf-metronet-tag-manager · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free