← Database

CVE-2022-0134

HIGH CVSS: 8.8 Published: 2022-02-21 Modified: 2026-06-17

Description

The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features, allowing attackers to make logged in admin perform such actions via a CSRF attack

Affected Platforms

Bologer Anycomment

Weakness Type

CWE-352

References