Lucene search

CVE-2022-1625

🗓️ 27 Jun 2022 09:09:15Reported by [email protected]Type

The New User Approve WordPress plugin lacks CSRF check, allowing attackers to add unauthorized invitation codes and change plugin settings by tricking admin user

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2022-1625	27 Jun 202209:15	–	cve
CNVD	WordPress New User Approve plugin跨站请求伪造漏洞	30 Jun 202200:00	–	cnvd
Prion	Cross site request forgery (csrf)	27 Jun 202209:15	–	prion
Cvelist	CVE-2022-1625 New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF	27 Jun 202208:57	–	cvelist
Patchstack	WordPress New User Approve plugin <= 2.3 - Arbitrary Settings Update & Invitation Code Creation via CSRF vulnerability	1 Jun 202200:00	–	patchstack
WPVulnDB	New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF	1 Jun 202200:00	–	wpvulndb
wpexploit	New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF	1 Jun 202200:00	–	wpexploit

Nvd

Node

wpexperts new_user_approveRange<2.4wordpress

Source	Link
wpscan	www.wpscan.com/vulnerability/e1693318-900c-47f1-bb77-008b0d33327f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jun 2022 09:15Current

CVSS24.3

CVSS34.3

EPSS0.001

CWE-352