4.3
Medium
CVE-2022-3151 The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could…
Description
The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Custom Cursors 3.0 | earliest → < 3.0.1 | 3.0.1 |