CVE-2022-1241

CVE-2022-1241 affects the WordPress Ask Me premium theme prior to version 6.8.2, where the Edit Profile page fails to properly sanitize and escape several fields, enabling Reflected Cross-Site Scripting (XSS). The vulnerability is documented across multiple sources (CVE records, CVE lists, and pa...

CVE-2022-1424

The CVE-2022-1424 entry concerns the WordPress Ask Me theme, specifically versions before 6.8.2, where AJAX actions omit CSRF checks. This flaw permits a logged-in attacker to perform actions on behalf of a user without CSRF protection. Documents from multiple sources (NVD, Red Hat, CNVD, CVE Lis...