Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-0328
HistoryFeb 28, 2022 - 9:15 a.m.

Cross site request forgery (csrf)

2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
2

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack

CPENameOperatorVersion
simple_membershiplt4.0.9

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%