CVE-2022-1694

MEDIUM

Useful Banner Manager < 1.6.1 - Cross-Site Request Forgery in Admin Page

Title source: llm

Description

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962

Scores

CVSS v3 6.5

EPSS 0.0051

EPSS Percentile 39.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE

CWE-352

Status published

Products (1)

useful_banner_manager_project/useful_banner_manager < 1.6.1

Published Jun 13, 2022

Tracked Since Feb 18, 2026