Vulnerabilities > Wpmk Ajax Finder Project

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-13	CVE-2022-1749	Cross-Site Request Forgery (CSRF) vulnerability in Wpmk Ajax Finder Project Wpmk Ajax Finder 1.0.1 The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1. network low complexity wpmk-ajax-finder-project CWE-352	8.8

Vulnerabilities > Wpmk Ajax Finder Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Wpmk Ajax Finder Project"}]}