ByteOS Network

CVE Vulnerability Details :

CVE-2022-50955

PUBLISHED

More Info Official Page

Assigner-VulnCheck

Assigner Org ID-83251b91-4cc7-4094-a5c7-464a1b83ea10

Published At-10 May, 2026 | 12:12

Updated At-10 May, 2026 | 12:12

▼CVE Numbering Authority (CNA)

WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery

WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious requests. Attackers can trick authenticated administrators into submitting forged requests to the options-general.php page with curtain parameters to toggle maintenance mode without valid nonce validation.

Affected Products

Vendor

curtain

Product

Curtain

Versions

Affected

1.0.2

Problem Types

Type	CWE ID	Description
CWE	CWE-352	Cross-Site Request Forgery (CSRF)

Type: CWE

CWE ID: CWE-352

Description: Cross-Site Request Forgery (CSRF)

Metrics

Version	Base score	Base severity	Vector
4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Credits

finder

Hassan Khan Yusufzai - Splint3r7

References

Hyperlink	Resource
https://www.exploit-db.com/exploits/50842	exploit
https://wordpress.org/plugins/curtain/	product
https://www.vulncheck.com/advisories/wordpress-plugin-curtain-cross-site-request-forgery	third-party-advisory

Hyperlink: https://www.exploit-db.com/exploits/50842

Resource:

exploit

Hyperlink: https://wordpress.org/plugins/curtain/

Resource:

product

Hyperlink: https://www.vulncheck.com/advisories/wordpress-plugin-curtain-cross-site-request-forgery

Resource:

third-party-advisory

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References