Medium severity4.3NVD Advisory· Published Nov 28, 2022· Updated Jun 17, 2026
CVE-2022-3850
CVE-2022-3850
Description
The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace arbitrary string in database tables via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/8ae42ec0-7e3a-4ea5-8e76-0aae7b92a8e9nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.