Not rated
CVE-2022-1695 The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page,…
Description
The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Simple Adsense Insertion 2.1 | earliest → < 2.1 | 2.1 |