CVE-2022-1694

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2022-06-13

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Useful Banner Manager (Unknown)
• Useful Banner Manager (Useful Banner Manager Project)

References

• https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962