CVE-2022-1694

6.5 mediumEPSS 0.5%

Medium (6.5) in useful banner manager project useful banner manager. EPSS 0.5% chance of exploitation in the next 30 days.

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

useful_banner_manager_project:useful_banner_manager

References

https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962
https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962

Check your stack JSON