CVE-2022-4549: Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF
Published Jan 16, 2023
·Updated
The Tickera WordPress plugin before 3.5.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Affected Software
1 affected component
Tickera Tickera WordPress<3.5.1.0
Event History
Jan 16, 2023
CVE Published
via MITRE·03:37 PM
Data Sourced
via MITRE·03:37 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-4549?
CVE-2022-4549 is a vulnerability in the Tickera WordPress plugin before version 3.5.1.0 that allows attackers to make unauthorized changes to its settings via a CSRF attack.
2
How severe is CVE-2022-4549?
CVE-2022-4549 has a severity rating of 4.3, which is considered medium.
3
What software is affected by CVE-2022-4549?
The Tickera WordPress plugin before version 3.5.1.0 is affected by CVE-2022-4549.
4
How can an attacker exploit CVE-2022-4549?
An attacker can exploit CVE-2022-4549 by performing a CSRF attack to make unauthorized changes to the Tickera WordPress plugin settings.
5
Is there a fix for CVE-2022-4549?
Yes, updating the Tickera WordPress plugin to version 3.5.1.0 or later will fix the vulnerability.