CVE-2022-2245

The Counter Box WordPress plugin before 1.2.1 is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.53% chance of exploitation in the next 30 days, 43th percentile

Published

2022-08-01

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/33705003-1f82-4b0c-9b4b-d4de75da309c

References

• CVE Record
• NVD entry

Related

• CVE-2022-2241
• CVE-2022-2251
• CVE-2022-2239
• CVE-2022-2252
• CVE-2022-2231
• CVE-2022-22521