Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86448
HistoryNov 23, 2022 - 12:00 a.m.

WordPress Ask Me plugin cross-site request forgery vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
wordpress
ask me plugin
cross-site request forgery
php
mysql
vulnerability
web application
user posts
attack

EPSS

0.001

Percentile

25.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blogging sites on PHP and MySQL servers. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could exploit this vulnerability to delete user posts.

EPSS

0.001

Percentile

25.9%

Related for CNVD-2022-86448