Monitor free

Report

New Known

Fixed

WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

5.4

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Subscribe To Comments Reloaded

Type

Plugin

Vulnerable versions

<= 211130

Fixed in

220502

PSID

fa3e5c60ee5d

CVE ID

CVE-2022-29414

Classification

Cross Site Request Forgery (CSRF)

OWASP Top 10

A5: Broken Access Control

Required privilege

Credits

Ex.Mi (Patchstack)

Publicly disclosed

2022-04-29

Patchstack vPatch available since

09.12.2021

Details

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities discovered by Ex.Mi (Patchstack) in WordPress Subscribe To Comments Reloaded plugin (versions <= 211130).

Solution

Update the WordPress Subscribe To Comments Reloaded plugin to the latest available version (at least 220502)

References