Addonspress ≫ Advanced Import

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

6.5

CVE-2022-3677

Exploit

EPSS 0.24%
Published 05.12.2022 17:15:10
Last modified 24.04.2025 14:15:34

The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which could allow attackers to make a logged in admin install arbitrary plugins from WordPress.org, and activate arbitrary ones from th...