Non notée
CVE-2022-0191 The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users,…
Description
The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ad Invalid Click Protector (AICP) 1.2 | premières → < 1.2.7 | 1.2.7 |