CVE-2022-0191CWE-352

Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF

published May 2, 2022

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-05-02T16:05Z
EPSS history
Timeline
  • 02 MAY 16:05Z
    Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
    cvelistv5