CVE-2022-2443

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions function found in the /freemind-wp-browser.php file. This makes it possible for unauthenticated attackers t...

CVE-2022-2443

creationtimestamp| type| source ---|---|--- 2022-07-18 20:39:54+00:00| seen| https://t.me/cibsecurity/46480...

CVE-2022-2443

The CVE-2022-2443 entry concerns the FreeMind WP Browser plugin for WordPress (versions up to 1.2). The vulnerability is a Cross-Site Request Forgery due to missing nonce protection in the FreemindOptions() function in freemind-wp-browser.php, allowing unauthenticated attackers to trick an admini...