← CVE Intelligence

CVE-2022-3097

LBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF PUBLISHED

Description (CNA)

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections.

Affected (CNA)

Vendor / productVersions
Unknown / Plugin LBstopattackaffected 0 before 1.1.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.