CVE-2022-2123CWE-352

WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF

published July 11, 2022

CVSS
—
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-07-11T12:57Z
EPSS history
Timeline
  • 11 JUL 12:57Z
    WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF
    cvelistv5