Lucene search
China National Vulnerability DatabaseCNVD-2022-88251HistorySep 28, 2022 - 12:00 a.m.
WordPress Simple Bitcoin Faucets Cross-Site Request Forgery Vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
bitcoin faucets
cross-site request forgery
vulnerability
php
ajax
authorization
csrf
exploited
attackers
bonds
0.001 Low
EPSS
Percentile
21.2%
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Simple Bitcoin Faucets 1.7.0 and its previous versions have a cross-site request forgery vulnerability, which stems from not doing any authorization and CSRF checks in AJAX operations, and can be exploited by attackers to add, delete, and edit bonds.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress simple bitcoin faucets | le | 1.7.0 |
Related
prion
prion
Cross site scripting
2022-09-26 13:15:00
patchstack
patchstack
wpvulndb
wpvulndb
Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
2022-08-31 00:00:00
nvd
nvd
CVE-2022-3024
2022-09-26 13:15:10
cvelist
cvelist
cve
cve
CVE-2022-3024
2022-09-26 13:15:10
wpexploit
wpexploit
Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS
2022-08-31 00:00:00