Unrated severityNVD Advisory· Published Feb 21, 2022· Updated Aug 2, 2024
AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF
CVE-2022-0134
Description
The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<0.2.18+ 1 more
- (no CPE)range: <0.2.18
- (no CPE)range: 0.2.18
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/fa09ea9b-d5a0-4773-a692-9ff0200bcd85mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.