PT-2023-14691 · WordPress · Fl3R Feelbox

Published 2023-01-30 · Updated 2025-10-07 · CVE-2022-4553

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions FL3R FeelBox WordPress plugin versions prior to 8.2

Description The issue concerns a lack of CSRF check when updating or resetting moods, which could allow attackers to perform actions via a CSRF attack, potentially leading to the deletion of the lydl posts and lydl poststimestamp database tables.

Recommendations For FL3R FeelBox WordPress plugin versions prior to 8.2, update to version 8.2 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-4553

Affected Products

Fl3R Feelbox

References · 5

• 🔥 https://wpscan.com/vulnerability/483ed482-a1d1-44f6-8b99-56e653d3e45f · Exploit
• https://osv.dev/vulnerability/CVE-2022-4553 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4553 · Security Note
• https://t.me/cvenotify/116604 · Telegram Post
• https://t.me/cveNotify/137673 · Telegram Post