EUVD-2023-59662

Malicious code in bioql PyPI...

CVE-2022-3489: Missing Authorization

The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request...