CVE-2022-3097: Laubrotel Lbstopattack

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Plugin LBstopattack WordPress plugin before 1.1.3 does not use nonces when saving its settings, making it possible for attackers to conduct CSRF attacks. This could allow attackers to disable the plugin's protections.

Affected products

• Laubrotel Lbstopattack: up to and including 1.1.2

Published 2022-10-25. Last modified 2026-06-17.