Security Advisory

CVE-2022-4553

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-30 20:31:44
Last updated 2025-03-27 19:44:35
Assigner WPScan
CVSS score not scored
State PUBLISHED

Description

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables