CVE-2022-3750 The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation

Description

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.

Affected products and versions

Product	Affected versions	Fixed in
Ask me 6.8	earliest → < 6.8.7	6.8.7

Other CVEs of Ask me

The 4 CVEs of Ask me →

CVE-2022-1251 The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit… Not rated CVE-2022-1424 The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker… Not rated CVE-2022-1241 The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit… Not rated