CVE-2022-1712 Information

Description

The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings which could allow attackers to make a logged in admin change them via a CSRF attack

Reference

https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515

Share on: