Security Advisory

CVE-2022-0134

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-21 10:45:59
Last updated 2024-08-02 23:18:41
Assigner WPScan
State PUBLISHED

Description

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack