The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515 | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-06-08 03:15
Updated : 2022-06-15 12:39
NVD link : CVE-2022-1712
Mitre link : CVE-2022-1712
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
livesync_project
- livesync