CVE-2022-4443

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 23, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-444305.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444315.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444325.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.CVE-2022-444337.8In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2022-444345.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-444355.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-444365.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-444375.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-444385.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-444395.5In messaging service, there is a missing permission check. This could lead to local denial of service in contacts service with no additionalCVE-2022-44446.1A vulnerability was found in ipti br.tag. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. TCVE-2022-444405.5In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-4443: Medium severity, CVSS 6.5 | Vulnix