Lucene search
PRIOn knowledge basePRION:CVE-2022-4024HistoryDec 19, 2022 - 2:15 p.m.
Cross site request forgery (csrf)
2022-12-1914:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
csrf protection
registration forms plugin
user deletion
unauthenticated attackers
0.001 Low
EPSS
Percentile
47.6%
The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)
| CPE | Name | Operator | Version |
|---|---|---|---|
| pie_register | lt | 3.8.1.3 |
Related
cve
cve
CVE-2022-4024
2022-12-19 14:15:11
nvd
nvd
CVE-2022-4024
2022-12-19 14:15:11
wpexploit
wpexploit
Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion
2022-11-28 00:00:00
wpvulndb
wpvulndb
Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion
2022-11-28 00:00:00
cvelist
cvelist