CVE-2022-0191: Acnam Ad Invalid Click Protector

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans

Affected products

• Acnam Ad Invalid Click Protector: before 1.2.7 (fixed in 1.2.7)

Published 2022-05-02. Last modified 2026-06-17.