PT-2022-14163 · WordPress · Wp Post Styling
Daniel Ruf
·
Published
2022-06-27
·
Updated
2022-07-06
·
CVE-2022-1845
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WP Post Styling WordPress plugin versions prior to 1.3.1
Description
The issue concerns the lack of CSRF checks in various actions within the plugin, potentially allowing attackers to manipulate a logged-in admin into performing unintended actions, such as deleting the plugin's data, updating settings, or adding new entries, via CSRF attacks.
Recommendations
For WP Post Styling WordPress plugin versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Post Styling