CVE-2022-3750

CVE-2022-3750 refers to a CSRF vulnerability in WordPress Ask Me (and related) where posts can be deleted without a nonce or confirmation in versions prior to 6.8.7. Root cause: CSRF in the post-deletion flow; impact: unauthorized post deletion with user interaction required for exploitation in s...

CVE-2022-1251

The CVE-2022-1251 entry concerns the WordPress Ask Me theme prior to version 6.8.4. The vulnerability arises because the Edit Profile POST request does not perform nonce checks, enabling an attacker to trick a user into changing their profile information. Affected component: WordPress Ask Me them...