CVE-2022-29489
MEDIUMSucuri Security <= 1.8.33 - Cross-Site Request Forgery
Title source: llmDescription
Cross-Site Request Forgery (CSRF) vulnerability in Sucuri Security plugin <= 1.8.33 at WordPress leading to Event log entry creation.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://patchstack.com/database/vulnerability/sucuri-scanner/wordpress-sucuri-security-plugin-1-8-33-cross-site-request-forgery-csrf-vulnerability
Product, Release Notes, Third Party Advisory x_refsource_confirm
https://wordpress.org/plugins/sucuri-scanner/#developers
Scores
CVSS v3
4.3
EPSS
0.0027
EPSS Percentile
18.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (2)
sucuri/security
< 1.8.33
Sucuri Inc./Sucuri Security (WordPress plugin)
<= 1.8.33 - 1.8.33
Published
Sep 16, 2022
Tracked Since
Feb 18, 2026