Lucene search
HistoryNov 28, 2022 - 2:15 p.m.
CVE-2022-3850
wordpress
csrf
database manipulation
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
33.3%
The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack
Affected configurations
Node
find_and_replace_all_projectfind_and_replace_allRange≤1.3wordpress
Related
cvelist
cvelist
CVE-2022-3850 Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF
2022-11-28 13:47:12
wpexploit
wpexploit
Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF
2022-11-03 00:00:00
wpvulndb
wpvulndb
Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF
2022-11-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-28 14:15:00
patchstack
patchstack
cve
cve
CVE-2022-3850
2022-11-28 14:15:18
cnvd
cnvd
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
33.3%
Related for NVD:CVE-2022-3850