Lucene search
+L

2 matches found

OSV
OSV
added 2022/10/17 12:15 p.m.5 views

CVE-2022-3151

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack...

4.3CVSS5.9AI score0.00267EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/10/17 12:0 a.m.28 views

CVE-2022-3151 WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack...

5AI score0.00267EPSS
SaveExploits2References1
Rows per page
Query Builder