Lucene search

K
nvd[email protected]NVD:CVE-2022-44627
HistoryNov 03, 2022 - 8:15 p.m.

CVE-2022-44627

2022-11-0320:15:34
CWE-352
web.nvd.nist.gov
2
cve-2022-44627
cross-site request forgery
david cole simple seo plugin
wordpress

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.001

Percentile

29.7%

Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.

Affected configurations

Nvd
Node
coledssimple_seoRange1.8.12wordpress
VendorProductVersionCPE
coledssimple_seo*cpe:2.3:a:coleds:simple_seo:*:*:*:*:*:wordpress:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.001

Percentile

29.7%

Related for NVD:CVE-2022-44627