CVE-2022-3688

creationtimestamp| type| source ---|---|--- 2025-04-29 17:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13869...

CVE-2022-3688

CVE-2022-3688 applies to the WPQA Builder WordPress plugin prior to version 5.9, where there is no CSRF check for follow/unfollow actions. The underlying issue permits CSRF attacks to cause logged-in users to perform such actions, with a CVSS 3.1 base score of 8.8 (HIGH) and impact on confidentia...