1 matches found
CVE-2022-0134: Cross-Site Request Forgery (CSRF)
The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack...
8.8CVSS7.7AI score0.00645EPSS
SaveExploits2References2
20