Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-67558
HistoryMay 06, 2022 - 12:00 a.m.

WordPress Subscribe To Comments Reloaded plugin cross-site request forgery vulnerability

2022-05-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

21.1%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Subscribe To Comments Reloaded plugin 211130 and earlier versions are vulnerable to cross-site request spoofing. An attacker can use this vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive actions, such as cleaning up log archives, downloading system information files, plugin system settings, plugin options settings, generating new keys, etc.

0.001 Low

EPSS

Percentile

21.1%

Related for CNVD-2022-67558