Lucene search
WPScanCVELIST:CVE-2022-2260HistoryAug 01, 2022 - 12:50 p.m.
CVE-2022-2260 GiveWP < 2.21.3 - DoS via CSRF
2022-08-0112:50:58
CWE-352
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
26.0%
The GiveWP WordPress plugin before 2.21.3 does not have CSRF in place when exporting data, and does not validate the exporting parameters such as dates, which could allow attackers to make a logged in admin DoS the web server via a CSRF attack as the plugin will try to retrieve data from the database many times which leads to overwhelm the target’s CPU.
CNA Affected
[
{
"product": "GiveWP – Donation Plugin and Fundraising Platform",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.21.3",
"status": "affected",
"version": "2.21.3",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-2260
2022-08-01 13:15:10
nvd
nvd
CVE-2022-2260
2022-08-01 13:15:10
wpexploit
wpexploit
GiveWP < 2.21.3 - DoS via CSRF
2022-07-11 00:00:00
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2022-08-01 13:15:00
wpvulndb
wpvulndb
GiveWP < 2.21.3 - DoS via CSRF
2022-07-11 00:00:00
openvas
openvas
WordPress GiveWP Plugin < 2.21.3 Multiple Vulnerabilities
2022-08-02 00:00:00