CVE-2022-1694: Useful Banner Manager Project Useful Banner Manager

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.

Affected products

• Useful Banner Manager Project Useful Banner Manager: up to and including 1.6.1

Published 2022-06-13. Last modified 2026-06-17.