medium4.3
CVE-2022-3336
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arb…
Impact
The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attackers to make logged in admin delete arbitrary visitors via a CSRF attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awplife | Event Monster | before 1.2.0 |