CVE-2022-3097

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p30

Published

Oct 25, 2022 (Oct 25, 2022)

Modified

Jun 17, 2026

Description

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections.

Vendors: laubrotel
Products: lbstopattack
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.