CVE-2022-3694

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account...

CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens

Specially constructed queries cause cross platform scripting leaking administrator tokens...

PT-2022-23692 · WordPress · Syncee

Name of the Vulnerable Software and Affected Versions: Syncee WordPress plugin versions prior to 1.0.10 Description: The issue allows the leakage of the administrator token, which can be used to take over the administrator's account. Recommendations: For versions prior to 1.0.10, update to versio...