CVE-2022-1251CWE-352

Ask Me < 6.8.4 - CSRF in Edit Profile

published August 22, 2022

CVSS
—
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00408 · 34.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-08-22T14:57Z
EPSS history
Timeline
  • 22 AUG 14:57Z
    Ask Me < 6.8.4 - CSRF in Edit Profile
    cvelistv5