ByteOS Network

Vulnerability Details :

CVE-2022-1780

Assigner-WPScan

Assigner Org ID-1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81

Published At-13 Jun, 2022 | 12:42

Updated At-03 Aug, 2024 | 00:16

LaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS

The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:WPScan

Assigner Org ID:1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81

Published At:13 Jun, 2022 | 12:42

Updated At:03 Aug, 2024 | 00:16

▼CVE Numbering Authority (CNA)

LaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS

Affected Products

Vendor

Unknown

Product

LaTeX for WordPress

Versions

Affected

From 3.4.10 through 3.4.10 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-352	CWE-352 Cross-Site Request Forgery (CSRF)

Type: CWE

CWE ID: CWE-352

Description: CWE-352 Cross-Site Request Forgery (CSRF)

Credits

Daniel Ruf

References

Hyperlink	Resource
https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a	x_refsource_MISC

Hyperlink: https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a	x_refsource_MISC x_transferred

Hyperlink: https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:contact@wpscan.com

Published At:13 Jun, 2022 | 13:15

Updated At:21 Jun, 2022 | 17:19

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 5.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

latex_project>>latex>>Versions up to 3.4.10(inclusive)

cpe:2.3:a:latex_project:latex:*:*:*:*:*:wordpress:*:*

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	contact@wpscan.com

CWE ID: CWE-352

Type: Primary

Source: contact@wpscan.com

References

Hyperlink	Source	Resource
https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a	contact@wpscan.com	Exploit Third Party Advisory

Hyperlink: https://wpscan.com/vulnerability/dd22ea1e-49a9-4b06-8dd9-bb224110f98a

Source: contact@wpscan.com

Resource:

Exploit

Third Party Advisory

Similar CVEs

106Records found

CVE-2021-24328

Matching Score-4

Assigner-WPScan

View Details

Matching Score-4

Assigner-WPScan

CVSS Score-6.2||MEDIUM

EPSS-0.18% / 39.84%

7 Day CHG~0.00%

Published-01 Jun, 2021 | 11:33

Updated-03 Aug, 2024 | 19:28

WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin's settings to arbitrary values, and set XSS payloads on them as well

Vendor-clogica Unknown

Product-wp_login_security_and_history WP Login Security and History

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-24703

Matching Score-4

Assigner-WPScan

View Details

Matching Score-4

Assigner-WPScan

CVSS Score-5.7||MEDIUM

EPSS-0.10% / 27.31%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 19:16

Updated-03 Aug, 2024 | 19:42

Download Plugin < 1.6.1 - Subscriber+ Arbitrary Plugin Activation

The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed.

Vendor-Unknown Metagauss Inc.

Product-download_plugin Download Plugin

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2024-8051

Matching Score-4

Assigner-WPScan

View Details

Matching Score-4

Assigner-WPScan

CVSS Score-5.7||MEDIUM

EPSS-0.04% / 11.38%

7 Day CHG~0.00%

Published-17 Sep, 2024 | 06:00

Updated-27 Sep, 2024 | 18:19

Special Feed Items <= 1.0.1 - Stored XSS via CSRF

The Special Feed Items WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Vendor-moc Unknown wordpress_plugin

Product-special_feed_items Special Feed Items special_feed_items

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2024-36548

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.12% / 31.97%

7 Day CHG~0.00%

Published-04 Jun, 2024 | 14:45

Updated-13 Feb, 2025 | 15:59

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del

Vendor-idccms n/a idccms_project

Product-idccms n/a idccms

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2024-31612

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.12% / 31.64%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 00:00

Updated-19 Aug, 2024 | 17:35

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information.

Vendor-emlog n/a emlog

Product-emlog n/a emlog

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2024-3058

Matching Score-4

Assigner-WPScan

View Details

Matching Score-4

Assigner-WPScan

CVSS Score-5.4||MEDIUM

EPSS-0.14% / 34.26%

7 Day CHG~0.00%

Published-26 Apr, 2024 | 05:00

Updated-07 May, 2025 | 18:05

ENL Newsletter <= 1.0.1 - Stored XSS via CSRF

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Vendor-enl_newsletter_plugin_project Unknown

Product-enl-newsletter ENL Newsletter

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-1780

Credits

LaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs