CVE-2022-2091CWE-352

Cache Images < 3.2.1 - Image Upload / Import via CSRF

published July 11, 2022

CVSS
—
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any logged user upload images via a CSRF attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-07-11T12:57Z
EPSS history
Timeline
  • 11 JUL 12:57Z
    Cache Images < 3.2.1 - Image Upload / Import via CSRF
    cvelistv5