CVE-2022-3750 The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation

Description

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Ask me 6.8	premières → < 6.8.7	6.8.7

Autres CVE de Ask me

Les 4 CVE de Ask me →

CVE-2022-1251 The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit… Non notée CVE-2022-1424 The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker… Non notée CVE-2022-1241 The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit… Non notée