CVE-2022-1695CWE-352

WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF

published June 6, 2022

CVSS
—
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-06-06T08:51Z
EPSS history
Timeline
  • 06 JUN 08:51Z
    WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
    cvelistv5