CVE-2022-1424CWE-352

Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions

published June 6, 2022

CVSS
—
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-06-06T08:51Z
EPSS history
Timeline
  • 06 JUN 08:51Z
    Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions
    cvelistv5