Skip to content
Sign in
Not rated

CVE-2022-0191 The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users,…

Description

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans

Affected products and versions

Product Affected versions Fixed in
Ad Invalid Click Protector (AICP) 1.2 earliest → < 1.2.7 1.2.7

Other CVEs of Ad Invalid Click Protector (AICP)

The 2 CVEs of Ad Invalid Click Protector (AICP) →
CVE-2022-0190 The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter… Not rated
Track this CVE