Lucene search
HistoryJan 16, 2023 - 4:15 p.m.
CVE-2022-4549
tickera
wordpress
csrf
vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
33.7%
The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Affected configurations
Node
tickeratickeraRange<3.5.1.0wordpress
Related
wpvulndb
wpvulndb
Tickera < 3.5.1.0- Plugin Data Deletion via CSRF
2022-12-23 00:00:00
cvelist
cvelist
CVE-2022-4549 Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
2023-01-16 15:37:59
cve
cve
CVE-2022-4549
2023-01-16 16:15:13
wpexploit
wpexploit
Tickera < 3.5.1.0- Plugin Data Deletion via CSRF
2022-12-23 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-01-16 16:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
4.6
Confidence
High
EPSS
0.001
Percentile
33.7%
Related for NVD:CVE-2022-4549