CVE-2022-1712

The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:livesync_project:livesync:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-06-08 03:15

Updated : 2022-06-15 12:39


NVD link : CVE-2022-1712

Mitre link : CVE-2022-1712


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

livesync_project

  • livesync