CVE-2022-0616

CVE-2022-0616: Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF

Vendor Unknown
Product Amelia – Events & Appointments Booking Calendar
Weakness CWE-352 · CSRF
Published March 21, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack

Key dates

02Disclosure timeline

March 21, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-2960 SVS Pricing Tables <= 1.0.4 - Cross-Site Request Forgery to Pricing Table Deletion CVE-2024-43265 WordPress Analytify plugin <= 5.3.1 - CSRF Leading to Optout Vulnerability CVE-2023-45068 WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-39681 WordPress Cooked Plugin - Cross-Site Request Forgery to Apply Template to All Recipes CVE-2026-45773 Turborepo: Login callback CSRF/session fixation