CVE-2022-3151

CVE-2022-3151: WP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF

Vendor Unknown
Product WP Custom Cursors
Weakness CWE-352 · CSRF
Published October 17, 2022
Last update May 14, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.

Key dates

02Disclosure timeline

October 17, 2022 CVE published
May 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-12386 WP Abstracts <= 2.7.3 - Cross-Site Request Forgery to Arbitrary Account Deletion CVE-2023-28930 WordPress Mobile Banner Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-33913 WordPress Xserver Migrator plugin <= 1.6.1 - CSRF to Arbitrary File Upload vulnerability CVE-2024-54172 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery CVE-2025-62005 WordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Cross Site Request Forgery (CSRF) vulnerability