PT-2022-22953 · WordPress · Oceanwp Sticky Header Plugin

Rasi + 1 · Published 2022-12-04 · Updated 2022-12-06 · CVE-2022-35730

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Oceanwp sticky header plugin version 1.0.8 and earlier

Description A Cross-Site Request Forgery (CSRF) issue affects the Oceanwp sticky header plugin on WordPress. This issue allows for malicious requests to be made on behalf of the user without their knowledge or consent.

Recommendations For Oceanwp sticky header plugin version 1.0.8 and earlier, update to a version later than 1.0.8 to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-35730

Affected Products

Oceanwp Sticky Header Plugin

References · 4

• https://osv.dev/vulnerability/CVE-2022-35730 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35730 · Security Note
• https://patchstack.com/database/vulnerability/sticky-header-oceanwp/wordpress-oceanwp-sticky-header-plugin-1-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/cibsecurity/53965 · Telegram Post