CVE-2022-32587: Codeandmore Wp Page Widget

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.

Affected products

• Codeandmore Wp Page Widget: before 4.0 (fixed in 4.0)

Published 2022-11-08. Last modified 2026-06-17.