Skip to content
OpenAdvisories

Product · mbeltwski

AnyMind Widget

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-2435

    AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting

    The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1. This is due to missing nonce protection on the createDOMStructure() function found in the ~/anymind-widget-id.php file. This makes it pos…

    mbeltwski AnyMind Widget Web / CMS