CVE-2022-0445

The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
Configurations

Configuration 1 (hide)

cpe:2.3:a:devowl:wordpress_real_cookie_banner:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 06:38

Type Values Removed Values Added
References () https://wpscan.com/vulnerability/d9f28255-0026-4c42-9e67-d17b618c2285 - Exploit, Third Party Advisory () https://wpscan.com/vulnerability/d9f28255-0026-4c42-9e67-d17b618c2285 - Exploit, Third Party Advisory

Information

Published : 2022-03-07 09:15

Updated : 2024-11-21 06:38


NVD link : CVE-2022-0445

Mitre link : CVE-2022-0445

CVE.ORG link : CVE-2022-0445


JSON object : View

Products Affected

devowl

  • wordpress_real_cookie_banner
CWE
CWE-352

Cross-Site Request Forgery (CSRF)