PT-2023-14691 · WordPress · Fl3R Feelbox

Publicado 2023-01-30 · Atualizado 2025-10-07 · CVE-2022-4553

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions FL3R FeelBox WordPress plugin versions prior to 8.2

Description The issue concerns a lack of CSRF check when updating or resetting moods, which could allow attackers to perform actions via a CSRF attack, potentially leading to the deletion of the lydl posts and lydl poststimestamp database tables.

Recommendations For FL3R FeelBox WordPress plugin versions prior to 8.2, update to version 8.2 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2022-4553

Produtos afetados

Fl3R Feelbox

Referências · 5

• 🔥 https://wpscan.com/vulnerability/483ed482-a1d1-44f6-8b99-56e653d3e45f · Exploit
• https://osv.dev/vulnerability/CVE-2022-4553 · Aviso do Fabricante
• https://t.me/cvenotify/116604 · Publicação no Telegram
• https://t.me/cveNotify/137673 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-4553 · Nota de Segurança