Security Advisory

CVE-2022-1599

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-11 12:56:01

Last updated 2024-08-03 00:10:03

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status (draft, published), slug, post date, comment status (enabled, disabled) and more.

← Browse all CVEs View on cve.org ↗