Lucene search
Ryo Onodera (Cryptography Laboratory Tokyo Denki University)PATCHSTACK:79E021E674BA53B4F04B9D494C7F7D07HistoryJun 16, 2022 - 12:00 a.m.
WordPress Button Widget Smartsoft plugin <= 1.0.1 - Cross-Site Request Forgery (CSRF) vulnerability to Cross-Site Scripting (XSS)
2022-06-1600:00:00
Ryo Onodera (Cryptography Laboratory Tokyo Denki University)
patchstack.com
6
0.001 Low
EPSS
Percentile
50.6%
Cross-Site Request Forgery (CSRF) vulnerability to Cross-Site Scripting (XSS) was discovered by Ryo Onodera (Cryptography Laboratory Tokyo Denki University) in the WordPress Button Widget Smartsoft plugin (versions <= 1.0.1).
Solution
Deactivate and delete. This plugin has been closed as of June 8, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| button widget smartsoft | le | 1.0.1 |
Related
nvd
nvd
CVE-2022-1912
2022-07-18 17:15:08
cvelist
cvelist
CVE-2022-1912
2022-07-18 16:16:27
cve
cve
CVE-2022-1912
2022-07-18 17:15:08
wpvulndb
wpvulndb
prion
prion
Cross site request forgery (csrf)
2022-07-18 17:15:00