Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/15 12:00 a.m.•4 views

CVE-2022-3240: Cross-Site Request Forgery (CSRF)

The "Follow Me Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.1. This is due to missing nonce validation on the FollowMeIgniteSocialMediaoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin'...

8.8CVSS5.5AI score0.00597EPSS
SaveExploits1References3
Rows per page
Query Builder