Lucene search
Ex.Mi (Patchstack)PATCHSTACK:18C5AD7AE607B498C96BEE3D91E9A971HistoryJan 24, 2022 - 12:00 a.m.
WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation
2022-01-2400:00:00
Ex.Mi (Patchstack)
patchstack.com
7
0.001 Low
EPSS
Percentile
21.6%
Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation discovered by Ex.Mi (Patchstack) in WordPress Access Demo Importer plugin (versions <= 1.0.7).
Solution
Update the WordPress Access Demo Importer plugin to the latest available version (at least 1.0.8).
| CPE | Name | Operator | Version |
|---|---|---|---|
| access demo importer | le | 1.0.7 |
Related
prion
prion
Cross site request forgery (csrf)
2022-04-18 17:15:00
cvelist
cvelist
cve
cve
CVE-2022-23975
2022-04-18 17:15:16
wpvulndb
wpvulndb
Access Demo Importer < 1.0.8 - Arbitrary Plugin Activation via CSRF
2022-01-24 00:00:00
cnvd
cnvd
nvd
nvd
CVE-2022-23975
2022-04-18 17:15:16