Security Advisory

CVE-2022-1578

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-21 00:00:00
Last updated 2025-04-30 14:57:01
Assigner WPScan
State PUBLISHED

Description

The My wpdb WordPress plugin before 2.5 is missing CSRF check when running SQL queries, which could allow attacker to make a logged in admin run arbitrary SQL query via a CSRF attack