← Database

CVE-2022-2762

MEDIUM CVSS: 6.5 Published: 2022-10-25 Modified: 2026-06-17

Description

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make a logged in admin update their notes via a CSRF attack

Affected Platforms

Adminpad Project Adminpad

Weakness Type

CWE-352

References