← Database

CVE-2022-1251

MEDIUM CVSS: 4.3 Published: 2022-08-22 Modified: 2026-06-17

Description

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.

Affected Platforms

Inkthemes Ask Me

Weakness Type

CWE-352, CWE-352

References