CVE-2022-0141

CVE-2022-0141: Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF

Vendor Unknown

Product Visual Form Builder

Weakness CWE-352 · CSRF

Published April 12, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks

Key dates

02Disclosure timeline

April 12, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0141 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

04Related CVE

CVE-2023-2631 CSRF vulnerability and missing permission checks in Code Dx Plugin CVE-2021-39133 Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server CVE-2021-32776 No CSRF form token cleanup on Windows servers CVE-2022-33177 WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity CVE-2024-31251 WordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerability