CVE-2022-2144CWE-352

Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF

published July 17, 2022

CVSS
—
EPSS
0%
Percentile
36.1
In the wild
Unconfirmed
What it is

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like default_role, users_can_register via a CSRF attack

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-07-17T10:36Z
EPSS history
Timeline
  • 17 JUL 10:36Z
    Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRF
    cvelistv5