Counter Box < 1.2.1 – Arbitrary Counter Activation/Deactivation via CSRF | CVE 2022-2245 | Plugin Vulnerabilities

Description

The plugin is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks

Proof of Concept

https://example.com/wp-admin/admin.php?page=counter-box&id=1&action=activate
https://example.com/wp-admin/admin.php?page=counter-box&id=1&action=deactivate

Affects Plugins

Fixed in 1.2.1

References

CVE

Classification

Type

CSRF

OWASP top 10

A2: Broken Authentication and Session Management

CWE

CVSS

Miscellaneous

Original Researcher

Raad Haddad of Cloudyrion GmbH

Submitter

Raad Haddad of Cloudyrion GmbH

Submitter twitter

Verified

Yes

WPVDB ID

33705003-1f82-4b0c-9b4b-d4de75da309c

Timeline

Publicly Published

2022-07-08 (about 3 years ago)

Added

2022-07-08 (about 3 years ago)

Last Updated

2023-04-11 (about 2 years ago)

Other

Published

Title

Published

2023-04-06

Title

WP Fatest Cache < 1.1.3 - Multiple CSRF

Published

2021-12-16

Title

Crisp Live Chat < 0.32 - CSRF to Stored Cross-Site Scripting

Published

2012-10-21

Title

White Label CMS - Cross-Site Request Forgery

Published

2018-06-12

Title

Tooltipy (tooltips for WP) <= 5.0 - Cross-Site Request Forgery (CSRF)

Published

2022-12-12

Title

Launchpad <= 1.0.13 - CSRF