Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:ask_me:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Ask Me (81b5be27-87fa-5049-bd15-fa98414edd7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-3750 |
vulnerable | 2026-06-08 05:48:22.263945 |
Ask Me < 6.8.7 - Post Deletion via CSRF
The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-30T15:33:32.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1424 |
vulnerable | 2026-06-08 05:39:13.144431 |
Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions
The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
Published: 2022-06-06T08:51:00.000Z
Updated: 2024-08-03T00:03:06.104Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1251 |
vulnerable | 2026-06-08 05:39:12.491552 |
Ask Me < 6.8.4 - CSRF in Edit Profile
The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.
Published: 2022-08-22T14:57:20.000Z
Updated: 2024-08-02T23:55:24.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1241 |
vulnerable | 2026-06-08 05:39:12.476081 |
Ask Me < 6.8.2 - Reflected Cross-Site Scripting
The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues
Published: 2022-06-06T08:50:54.000Z
Updated: 2024-08-02T23:55:24.534Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.