CVE-2022-1845

🗓️ 27 Jun 2022 08:57:57Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 65 Views🌐 WEB

The WP Post Styling WordPress plugin before 1.3.1 allows CSRF attacks

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-1845	27 Jun 202209:15	–	attackerkb
CNNVD	WordPress plugin WP Post Styling 跨站请求伪造漏洞	27 Jun 202200:00	–	cnnvd
CNVD	WordPress WP Post Styling plugin跨站请求伪造漏洞	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1845 WP Post Styling < 1.3.1 - Multiple CSRF	27 Jun 202208:57	–	cvelist
EUVD	EUVD-2022-25121	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1845	27 Jun 202209:15	–	nvd
Prion	Cross site request forgery (csrf)	27 Jun 202209:15	–	prion
RedhatCVE	CVE-2022-1845	22 May 202523:32	–	redhatcve
wpexploit	WP Post Styling < 1.3.1 - Multiple CSRF	31 May 202200:00	–	wpexploit
WPVulnDB	WP Post Styling < 1.3.1 - Multiple CSRF	31 May 202200:00	–	wpvulndb

NVD

Vulners

Node

wp_post_styling_project wp_post_stylingRange<1.3.1wordpress

[
  {
    "product": "WP Post Styling",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.3.1",
        "status": "affected",
        "version": "1.3.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/6ee3e9e2-ff57-41c4-8cc5-b258801a8a02

Parameter	Position	Path	Description	CWE
delete_style	request body	/wp-admin/options-general.php?page=wp-post-styling/wp-post-styling.php	CSRF vulnerability allows unauthorized requests to delete data via POST without proper CSRF checks.	CWE-352
submit-type	request body	/wp-admin/options-general.php?page=wp-post-styling/wp-post-styling.php	CSRF vulnerability allows unauthorized requests to delete data via POST without proper CSRF checks.	CWE-352
submit	request body	/wp-admin/options-general.php?page=wp-post-styling/wp-post-styling.php	CSRF vulnerability allows unauthorized requests to delete data via POST without proper CSRF checks.	CWE-352
jd-post-styling-screen	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
jd-post-styling-default	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
jd-post-styling-library	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
jd-post-styling-boxsize	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
submit-type	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
submit	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php	CSRF vulnerability allows unauthorized requests to modify settings/library via POST without proper CSRF checks.	CWE-352
edit_style	request body	/wp-admin/options-general.php?page=wp-post-styling%2Fwp-post-styling.php&edit_style=1	CSRF vulnerability allows unauthorized requests to update a WP Post Styling library via POST without CSRF protection.	CWE-352

21 Nov 2024 06:41Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3

CVSS 24.3

EPSS0.00112

CWE-352