Lucene search
Ex.Mi (Patchstack)PATCHSTACK:7C93F07CB8E6B2DDF5BF2D7930F24F9CHistoryApr 28, 2022 - 12:00 a.m.
WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
2022-04-2800:00:00
Ex.Mi (Patchstack)
patchstack.com
18
0.001 Low
EPSS
Percentile
29.7%
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were discovered by Ex.Mi (Patchstack) in WordPress Hermit 音乐播放器 plugin (versions <= 3.1.6).
Solution
Deactivate and delete. This plugin has been closed as of April 25, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermit 音乐播放器 | le | 3.1.6 |
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2022-04-28 17:15:00
cve
cve
CVE-2022-29412
2022-04-28 17:15:39
wpvulndb
wpvulndb
Hermit <= 3.1.6 - Arbitrary Cache/Source Deletion & Source Creation via CSRF
2022-04-28 00:00:00
nvd
nvd
CVE-2022-29412
2022-04-28 17:15:39