Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/21 12:00 a.m.•4 views

CVE-2022-0134: Cross-Site Request Forgery (CSRF)

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack...

8.8CVSS7.7AI score0.00645EPSS
SaveExploits2References2
Rows per page
Query Builder