Wp Championship

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wp-championship_project:wp-championship:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Championship Project (2b35811d-d96f-50bd-b88c-bd0c155f00c8)
ProductWp Championship (3e37003f-92e0-501c-9be0-56f8e670839f)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1967 vulnerable 2026-06-08 05:39:14.302354 WP Championship < 9.3 - Multiple CSRF
The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update the plugin's settings. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
Published: 2022-07-04T13:05:56.000Z
Updated: 2024-08-03T00:24:43.403Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.