CVE-2022-1694CWE-352

Useful Banner Manager <= 1.6.1 - Modify banners via CSRF

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-06-13T12:42Z
EPSS history
Timeline
  • 13 JUN 12:42Z
    Useful Banner Manager <= 1.6.1 - Modify banners via CSRF
    cvelistv5