CVE-2022-1957

The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:comment_license_project:comment_license:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2022-07-11 13:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-1957

Mitre link : CVE-2022-1957

CVE.ORG link : CVE-2022-1957


JSON object : View

Products Affected

comment_license_project

  • comment_license
CWE
CWE-352

Cross-Site Request Forgery (CSRF)