CVE-2022-27629: CSRF
Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27629?
The severity of CVE-2022-27629 is considered high due to the potential for remote unauthenticated attackers to hijack administrator sessions.
How do I fix CVE-2022-27629?
To fix CVE-2022-27629, update the 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' plugin to version 1.9.6 or later.
What systems are affected by CVE-2022-27629?
CVE-2022-27629 affects versions of the 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' plugin prior to 1.9.6.
Can CVE-2022-27629 be exploited without user interaction?
Yes, CVE-2022-27629 can be exploited without user interaction, allowing attackers to perform unauthorized actions.
What kind of attacks does CVE-2022-27629 allow?
CVE-2022-27629 allows for cross-site request forgery (CSRF) attacks, enabling unauthorized operations to be performed by the hijacked administrator session.