CVE Database
/

CVE-2022-1695

Back to search

CVE-2022-1695

Published: Jun 6, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

VendorProductVersions

Unknown

WP Simple Adsense Insertion

affected
2.1 - < 2.1

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now