← Database

CVE-2022-4553

MEDIUM CVSS: 4.3 Published: 2023-01-30 Modified: 2026-06-17

Description

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables

Affected Platforms

Armandofiore Fl3R Feelbox

Weakness Type

CWE-352

References