CVE-2022-0134
AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Feb 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack
Affected products
Unknown · AnyCommentWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →