Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86456
HistoryNov 23, 2022 - 12:00 a.m.

WordPress My wpdb plugin cross-site request forgery vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wordpress
wpdb plugin
cross-site request forgery
sql queries
administrator
vulnerability

EPSS

0.002

Percentile

61.3%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress My wpdb plugin versions prior to 2.5 are vulnerable to cross-site request forgery, which stems from a lack of CSRF checks when running SQL queries, and can be exploited to allow a logged-in administrator to execute arbitrary SQL queries.

EPSS

0.002

Percentile

61.3%