Aller au contenu
Se connecter
Non notée

CVE-2022-0134 The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features,…

Description

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
AnyComment 0.2 premières → < 0.2.18 0.2.18

Autres CVE de AnyComment

Les 3 CVE de AnyComment →
CVE-2022-0279 The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply,… Non notée CVE-2021-24838 The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to… Non notée
Suivre cette CVE