CyberSecBulletin

Smartsoftbuttonwidget vulnerabilities

We track 1 vulnerability in Smartsoftbuttonwidget products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2022.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Smartsoftbuttonwidget vulnerabilities

  • 8.8 High severity

    Button Widget Smartsoft: Cross-Site Request Forgery

    CVE-2022-1912Smartsoftbuttonwidget

    The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation on the smartsoftbutton_settings page. This makes it possible for unauthenticated attac