CVE-2022-3850

CVE-2022-3850 concerns the Find and Replace All WordPress plugin (versions prior to 1.3). The root cause is missing CSRF protection when performing a string replacement, enabling a CSRF attack that can cause a logged-in administrator to replace arbitrary strings in database tables. Reported detai...

CVE-2022-3850 Find and Replace All <= 1.3 - Arbitrary Replacement via CSRF

The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack...