Medium severity6.5NVD Advisory· Published Aug 22, 2022· Updated Jun 17, 2026

CVE-2022-2388

Description

The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Coderllm-fuzzy
Range: <2.5.3
Package: https://wordpress.org/plugins/wp-coder
Wow Company/Wp Coder
cpe:2.3:a:wow-company:wp_coder:*:*:*:*:*:wordpress:*:*
Range: <2.5.3
WordPress/Wp Cal Plugincpe-rescue

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/50acd35f-eb31-4aba-bf32-b390e9514bebnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000