CVE-2022-3151

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p21

Published

Oct 17, 2022 (Oct 17, 2022)

Modified

Jun 17, 2026

Description

The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in admin delete arbitrary cursors via a CSRF attack.

Vendors: wp custom cursors project
Products: wp custom cursors
Ecosystems: WordPress
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.