| |
Vulnerability CVE-2022-2388
Published: 2022-08-22
| Description: |
The WP Coder WordPress plugin before 2.5.3 does not have CSRF check in place when deleting code created by the plugin, which could allow attackers to make a logged in admin delete arbitrary ones via a CSRF attack |
Type:
CWE-352 (Cross-Site Request Forgery (CSRF))
References: |
https://wpscan.com/vulnerability/50acd35f-eb31-4aba-bf32-b390e9514beb
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
