CVE-2022-1779

8.1 highEPSS 0.5%

High (8.1) in auto delete posts project auto delete posts. EPSS 0.5% chance of exploitation in the next 30 days.

The Auto Delete Posts WordPress plugin through 1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and delete specific posts, categories and attachments at once.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

auto_delete_posts_project:auto_delete_posts

References

https://wpscan.com/vulnerability/45117646-88ff-41d4-8abd-e2f18d4b693e
https://wpscan.com/vulnerability/45117646-88ff-41d4-8abd-e2f18d4b693e

Check your stack JSON