CVE-2022-2762

creationtimestamp| type| source ---|---|--- 2022-10-25 20:26:59+00:00| seen| https://t.me/cibsecurity/52030 2025-05-08 14:23:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15523...

CVE-2022-2762

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make a logged in admin update their notes via a CSRF attack...

CVE-2022-2762 AdminPad < 2.2 - Note Update via CSRF

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make a logged in admin update their notes via a CSRF attack...

CVE-2022-2762

Summary: CVE-2022-2762 affects the AdminPad WordPress plugin, versions prior to 2.2, where there is no CSRF check when updating an admin’s note. This allows a CSRF attack to cause a logged-in admin to update notes without proper authorization. Root cause: missing CSRF validation in the note-updat...