CVE-2022-0191
Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF
The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans
CVSS 3.1 · 6.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products