Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1695

WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Simple Adsense Insertion

  • 2.1 to < 2.1affected

References