CVE-2022-47150 — WP Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 3.0.5

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2022-47150	WP Dark Mode – Improve Accessibility with AI Powered Dark Theme [wp-dark-mode] < 3.0.5	Cross-Site Request Forgery (CSRF)	Medium 4.3	< 3.0.5	3.0.5	2023-03-21	—

CVE-2022-47150

Update the WordPress WP Dark Mode – Best Dark Mode & Social Sharing Plugin for WordPress plugin to the latest available version (at least 3.0.5). Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress WP Dark Mode – Best Dark Mode & Social Sharing Plugin for WordPress Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 3.0.5.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)