Skip to content
Sign in
Not rated

CVE-2022-1203 The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as…

Description

The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options

Affected products and versions

Product Affected versions Fixed in
Content Mask 1.8 earliest → < 1.8.4.1 1.8.4.1

Other CVEs of Content Mask

The 3 CVEs of Content Mask →
CVE-2025-15690 The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post… 6.8 Medium CVE-2026-77003 The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being… 2.7 Low
Track this CVE