Cross-Site Request Forgery (CSRF) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress allows an attacker to delete or to turn on/off snippets.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:59
Type | Values Removed | Values Added |
---|---|---|
References | () https://patchstack.com/database/vulnerability/code-snippets-extended/wordpress-code-snippets-extended-plugin-1-4-7-cross-site-request-forgery-csrf-vulnerability - Third Party Advisory | |
References | () https://wordpress.org/plugins/code-snippets-extended/#developers - Vendor Advisory |
25 May 2022, 18:55
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:code_snippets_extended_project:code_snippets_extended:*:*:*:*:*:*:wordpress:* | |
CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 5.4 |
References | (CONFIRM) https://patchstack.com/database/vulnerability/code-snippets-extended/wordpress-code-snippets-extended-plugin-1-4-7-cross-site-request-forgery-csrf-vulnerability - Third Party Advisory | |
References | (CONFIRM) https://wordpress.org/plugins/code-snippets-extended/#developers - Vendor Advisory |
17 May 2022, 20:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-05-17 20:15
Updated : 2024-11-21 06:59
NVD link : CVE-2022-29435
Mitre link : CVE-2022-29435
CVE.ORG link : CVE-2022-29435
JSON object : View
Products Affected
code_snippets_extended_project
- code_snippets_extended
CWE
CWE-352
Cross-Site Request Forgery (CSRF)