CVE-2022-1695

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form...

CVE-2022-1695

CVE-2022-1695 affects the WordPress plugin WP Simple Adsense Insertion (before 2.1). The root cause is the absence of CSRF checks on updates to the plugin’s admin page, enabling an attacker to trick a logged-in user into submitting a form that can manipulate ads and inject arbitrary JavaScript. P...

PT-2022-14052

Name of the Vulnerable Software and Affected Versions WP Simple Adsense Insertion WordPress plugin versions prior to 2.1 Description The issue allows an attacker to trick a logged-in user into manipulating ads and injecting arbitrary javascript via submitting a form, due to the lack of CSRF check...

CVE-2022-1695: Cross-Site Request Forgery (CSRF)

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form...