WordPress Page View Count plugin <= 2.5.5 - Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-40131

5.4MEDIUM

Key Information:

Vendor: Wordpress
Status: Page View Count (WordPress Plugin)
Vendor: CVE Published:; 13 October 2022

Summary

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page View Count plugin <= 2.5.5 on WordPress allows an attacker to reset the plugin settings.

Affected Version(s)

Page View Count (WordPress plugin) <= 2.5.5 <= 2.5.5

References

https://patchstack.com/database/vulnerability/page-views-...

https://wordpress.org/plugins/page-views-count/#developers

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Oct 13, 2022
Vulnerability Reserved
Sep 14, 2022

Credit

Vulnerability discovered by Mika (Patchstack Alliance)