CVE-2022-1251

4.3 mediumEPSS 0.4%

Medium (4.3) in inkthemes ask me. EPSS 0.4% chance of exploitation in the next 30 days.

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

inkthemes:ask_me

References

https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349
https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349

Check your stack JSON