CVE-2022-2388
WP Coder < 2.5.3 - Code Deletion via CSRF
- State
- Published
- Severity
- Not scored
- Published
- Aug 22, 2022
- Updated
- Aug 3, 2024
- Reserved
- Jul 12, 2022
Description
The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack
Scores
The record has no CVSS score.
Weaknesses
- CWE-352 Cross-Site Request Forgery (CSRF)
Affected Products
| Product | Versions |
|---|---|
WP Coder – add custom html, css and js codeUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.