Approved changes feed: RSS · Atom

cpe:2.3:a:2code:ask_me:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor2Code (43a1989d-2be3-5fea-84c8-23a49da2dd0b)
ProductAsk Me (9bb7ecbe-d886-5b45-977a-32cb40ef28be)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1424 vulnerable 2026-06-08 05:39:13.144461 Ask Me < 6.8.2 - Multiple CSRF in AJAX Actions
The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
Published: 2022-06-06T08:51:00.000Z
Updated: 2024-08-03T00:03:06.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1241 vulnerable 2026-06-08 05:39:12.476963 Ask Me < 6.8.2 - Reflected Cross-Site Scripting
The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues
Published: 2022-06-06T08:50:54.000Z
Updated: 2024-08-02T23:55:24.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.