Lucene search
HistoryAug 22, 2022 - 3:15 p.m.
CVE-2022-1251
wordpress
security vulnerability
profile information
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.9%
The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.
Affected configurations
Node
inkthemesask_meRange<6.8.4wordpress
Related
cvelist
cvelist
CVE-2022-1251 Ask Me < 6.8.4 - CSRF in Edit Profile
2022-08-22 14:57:20
cve
cve
CVE-2022-1251
2022-08-22 15:15:13
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2022-08-22 15:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.9%
Related for NVD:CVE-2022-1251