CVE-2022-2245CWE-352

Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF

published August 1, 2022

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00531 · 44.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-08-01T12:50Z
EPSS history
Timeline
  • 01 AUG 12:50Z
    Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
    cvelistv5