CVE-2022-0445

The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:devowl:wordpress_real_cookie_banner:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2022-03-07 09:15

Updated : 2024-02-28 19:09


NVD link : CVE-2022-0445

Mitre link : CVE-2022-0445

CVE.ORG link : CVE-2022-0445


JSON object : View

Products Affected

devowl

  • wordpress_real_cookie_banner
CWE
CWE-352

Cross-Site Request Forgery (CSRF)