SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2022-29414

MEDIUM · CVSS 5.4 EPSS 0.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-29 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It affects WordPress.

CVE
CVE-2022-29414
Severity
MEDIUM
CVSS
5.4
EPSS
0.38%
WordPress

Original NVD Description

Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to clean up Log archive, download system info file, plugin system settings, plugin options settings, generate a new key, reset all options, change notifications settings, management page settings, comment form settings, manage subscriptions > mass update settings, manage subscriptions > add a new subscription, update subscription, delete Subscription.

Related CVEs

Other vulnerabilities affecting the same vendor(s)