Lucene search
MOTEKI TAKERUPATCHSTACK:FB506DF8020F866DC049296E204071C7HistoryAug 02, 2022 - 12:00 a.m.
WordPress Banner Cycler plugin <= 1.4 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS)
2022-08-0200:00:00
MOTEKI TAKERU
patchstack.com
20
wordpress
banner cycler
csrf vulnerability
cross-site scripting
moteki takeru
deactivate
delete
0.001 Low
EPSS
Percentile
50.5%
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered by MOTEKI TAKERU in WordPress Banner Cycler plugin (versions <= 1.4).
Solution
Deactivate and delete. This plugin has been closed as of June 30, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| banner cycler | le | 1.4 |
Related
cve
cve
CVE-2022-2233
2022-09-06 18:15:13
nvd
nvd
CVE-2022-2233
2022-09-06 18:15:13
prion
prion
Cross site request forgery (csrf)
2022-09-06 18:15:00
wpvulndb
wpvulndb
Banner Cycler <= 1.4 - Stored Cross-Site Scripting via CSRF
2022-08-02 00:00:00
cvelist
cvelist
CVE-2022-2233
2022-09-06 17:18:55