CVE-2022-3151

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-10-17

Last modified

2025-05-14

Weaknesses

CWE-352

Affected products

• Wp Custom Cursors (Unknown)
• Wp Custom Cursors (Wp Custom Cursors Project)

References

• https://wpscan.com/vulnerability/27816c70-58ad-4ffb-adcc-69eb1b210744