CVE-2022-47422

Cross-Site Request Forgery CSRF vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin = 3.1.5 versions...

CVE-2022-47422

The CVE-2022-47422 entry concerns the WordPress plugin HM Plugin Accept Stripe Donation – AidWP, affected up to version 3.1.5. Connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability due to insufficient CSRF protections, enabling an attacker to induce actions via an authentica...

WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Stripe Donation and Payment Plugin Type Plugin Vulnerable versions = 3.1.5 Fixed in 3.1.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47422 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 65a4caa8400...