CVE-2022-29412 — WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

CVE-2022-29412

WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities PUBLISHED

Description (CNA)

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source.

Affected (CNA)

Vendor / product	Versions
Mufeng / Hermit 音乐播放器 (WordPress plugin)	affected <= 3.1.6 through 3.1.6

CWE

CWE-352

References

https://wordpress.org/plugins/hermit/
https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-multiple-cross-site-request-forgery-csrf-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://wordpress.org/plugins/hermit/
https://patchstack.com/database/vulnerability/hermit/wordpress-hermit-plugin-3-1-6-multiple-cross-site-request-forgery-csrf-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.