Now officially on WordPress.org

CVE Database / CVE-2022-0134

CVE · High

CVE-2022-0134 — AnyComment [anycomment] < 0.2.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-0134 AnyComment [anycomment] < 0.2.18 Cross-Site Request Forgery (CSRF) High 8.8 < 0.2.18 0.2.18 2022-01-19 —

CVE-2022-0134

The AnyComment plugin versions prior to 0.2.18 lack cross-site request forgery protections on its Import and Revert HyperComments functionality, potentially enabling attackers to trick authenticated administrators into executing these operations without their knowledge through a CSRF attack.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings