WordPress Plugin Vulnerabilities

SeoSamba for WordPress Webmasters < 1.0.6 - Access Key Update via CSRF

Description

The plugin does not have CSRF check when updating its Access Key setting, which could allow attackers to make logged in admins perform such action via a CSRF attack

Affects Plugins

Plugin icon
seosamba-webmasters
Fixed in 1.0.6

References

CVE
CVE-2022-41620

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
ptsfence
Verified
No
WPVDB ID
fc28f8f9-b1dd-4970-80b1-6aac5213b69e

Timeline

Publicly Published
2022-10-10 (about 3 years ago)
Added
2023-02-08 (about 3 years ago)
Last Updated
2023-10-12 (about 2 years ago)

Other

Published
Title
Published
2023-04-14
Title
WP EasyPay < 4.1 - CSRF
Published
2025-06-05
Title
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent < 3.8.1 - Cross-Site Request Forgery
Published
2025-06-06
Title
Min Max Step Quantity Limits Manager for WooCommerce < 5.1.1 - Cross-Site Request Forgery
Published
2024-04-10
Title
Dashboard To-Do List < 1.3.2 - Cross-Site Request Forgery via ardtdw_widgetupdate()
Published
2024-10-11
Title
Easy PayPal Gift Certificate <= 1.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wpppgc_plugin_options