← Database

CVE-2022-4024

MEDIUM CVSS: 6.5 Published: 2022-12-19 Modified: 2026-06-17

Description

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)

Affected Platforms

Genetechsolutions Pie Register

Weakness Type

CWE-352, CWE-862

References