CVE-2022-2762 Information

Description

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin’s note allowing attackers to make a logged in admin update their notes via a CSRF attack

Reference

https://wpscan.com/vulnerability/cf0b3893-3283-46d6-a497-f3110a35d42a