1 matches found
CVE-2022-3240: Cross-Site Request Forgery (CSRF)
The "Follow Me Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.1. This is due to missing nonce validation on the FollowMeIgniteSocialMediaoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin'...
8.8CVSS5.5AI score0.00597EPSS
SaveExploits1References3
20