The Ask me WordPress theme before 6.8.2 does not perform...
Moderate severity
Unreviewed
Published
Jun 9, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jun 8, 2022
Published to the GitHub Advisory Database
Jun 9, 2022
Last updated
Jan 27, 2023
The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
References