Vulnerabilities and Security Researches

AnyComment, CVE-2022-0134

CVE, Research URL: CVE-2022-0134
Home page URL: Security reports for AnyComment
Application: AnyComment
Published on: Feb 21, 2022
Research Description: The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack
Affected versions: max 0.2.18.
Status: vulnerable