PT-2022-14109

Name of the Vulnerable Software and Affected Versions LaTeX for WordPress versions 3.4.10 and earlier Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could also lead to...

CVE-2022-1780: Cross-Site Request Forgery (CSRF)

The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping...