Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1251

Ask Me < 6.8.4 - CSRF in Edit Profile

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Ask me

  • 6.8.4 to < 6.8.4affected

References