Unrated severityNVD Advisory· Published Jun 13, 2022· Updated Aug 3, 2024
One Click Plugin Updater <= 2.4.14 - Arbitrary Settings Update via CSRF
CVE-2022-1791
Description
The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates and the related check.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=2.4.14+ 1 more
- (no CPE)range: <=2.4.14
- (no CPE)range: <=2.4.14
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/5c185269-cb3a-4463-8d73-b190813d4431mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.