PT-2022-14956

Name of the Vulnerable Software and Affected Versions Jquery Validation For Contact Form 7 WordPress plugin versions prior to 5.3 Description The issue is related to the lack of a CSRF check when updating the plugin's settings. This could allow attackers to make a logged-in admin change blog...

CVE-2022-2144: Cross-Site Request Forgery (CSRF)

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like defaultrole, userscanregister via a CSRF attack...