Not rated
CVE-2022-2245 The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which…
Description
The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Counter Box – WordPress plugin for countdown, timer, counter 1.2 | earliest → < 1.2.1 | 1.2.1 |