Ask Me (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-11-21. Vendor: Unknown.

CVEs of Ask Me

• CVE-2022-3750 - CVSS 4.7 (medium), 2022-11-21: The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.
• CVE-2022-1251 - CVSS 4.3 (medium), 2022-08-22: The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a…
• CVE-2022-1424 - CVSS 6.5 (medium), 2022-06-08: The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform…
• CVE-2022-1241 - CVSS 6.1 (medium), 2022-06-08: The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site…