Lucene search
Daniel RufPATCHSTACK:62E8B96F286E978DC92F6E599756DB05HistoryMay 16, 2022 - 12:00 a.m.
WordPress LiveSync plugin <= 1.0 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
2022-05-1600:00:00
Daniel Ruf
patchstack.com
4
0.001 Low
EPSS
Percentile
25.9%
Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by Daniel Ruf in WordPress LiveSync plugin (versions <= 1.0).
Solution
Deactivate and delete. This plugin has been closed as of May 13, 2022 and is not available for download. This closure is temporary, pending a full review.
Related
cve
cve
CVE-2022-1712
2022-06-08 10:15:10
cvelist
cvelist
nvd
nvd
CVE-2022-1712
2022-06-08 10:15:10
wpvulndb
wpvulndb
LiveSync for WordPress <= 1.0 - Arbitrary Settings Update via CSRF
2022-05-16 00:00:00
wpexploit
wpexploit
LiveSync for WordPress <= 1.0 - Arbitrary Settings Update via CSRF
2022-05-16 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-08 10:15:00