CVE-2022-32587

Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-11-08

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Wp Page Widget (Codeandmore)
• Wp Page Widget Wordpress Plugin (Codeandmore)

References

• https://patchstack.com/database/vulnerability/wp-page-widget/wordpress-wp-page-widget-plugin-3-9-cross-site-request-for…
• https://wordpress.org/plugins/wp-page-widget/