CVE-2022-3750 - Ask Me < 6.8.7 - Post Deletion via CSRF

MEDIUM

Ask Me < 6.8.7 - Post Deletion via CSRF

Published Nov 21, 2022

4.7

MEDIUM

CVSS 3.1

EPSS 0.38%

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Ask me	unaffected	Affected ≥ 0, < 6.8.7

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43106		Advisory
https://wpscan.com/vulnerability/5019db80-0356-497d-b488-a26a5de78676		exploitvdb-entrytechnical-descriptionThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Nov 21, 2022

Updated Apr 30, 2025

Reserved Oct 28, 2022

CISA Vulnrichment

Updated Apr 30, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published Nov 21, 2022

Updated Apr 30, 2025

GitHub

No data