Security Advisory

CVE-2022-3999

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-12-12 17:54:49

Last updated 2025-04-22 14:49:47

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such as subscriber to delete arbitrary options from the blog, which could make the blog unavailable.

← Browse all CVEs View on cve.org ↗