CVE-2022-2762

CVE-2022-2762: AdminPad < 2.2 - Note Update via CSRF

Vendor Unknown

Product AdminPad

Weakness CWE-352 · CSRF

Published October 25, 2022

Last update May 8, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin's note, allowing attackers to make a logged in admin update their notes via a CSRF attack

Key dates

02Disclosure timeline

October 25, 2022 CVE published

May 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2762 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

04Related CVE

CVE-2024-27265 IBM Integration Bus for z/OS cross-site request forgery CVE-2020-10771 CVE-2025-23573 WordPress WP Background Tile plugin <= 1.0 - CSRF to Stored XSS vulnerability CVE-2024-1361 Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder CVE-2025-48255 WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability