Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-29412

WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Description

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mufeng Hermit 音乐播放器 (WordPress plugin)

  • <= 3.1.6 to ≤ 3.1.6affected

References