PT-2022-13189 · WordPress · The Wordpress Real Cookie Banner

Krzysztof Zając · Published 2022-03-07 · Updated 2022-03-11 · CVE-2022-0445

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin versions prior to 2.14.2

Description The issue concerns a lack of CSRF checks when resetting settings, allowing attackers to manipulate logged-in admins into resetting them via a CSRF attack.

Recommendations For versions prior to 2.14.2, update to version 2.14.2 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-0445

Affected Products

The Wordpress Real Cookie Banner

References · 3

• 🔥 https://wpscan.com/vulnerability/d9f28255-0026-4c42-9e67-d17b618c2285 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0445 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0445 · Vendor Advisory