Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: 2code Component: Ask Me Clear all filters
TI-2022-01305 CVE-2022-1424 · GHSA-gw4p-2m2w-qw96

Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions

Priority LOW 30

The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00542 Published 2022-06-06 Fixed in 6.8.2 CWE-352
TI-2022-01128 CVE-2022-1241 · GHSA-94q2-7v88-792r

Ask Me < 6.8.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-06-06 Fixed in 6.8.2 CWE-79