CVE-2022-1627

The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2022-1627

The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2022-1627

CVE-2022-1627 affects the WordPress My Private Site plugin up to version 3.0.8. The vulnerability is a CSRF flaw in the plugin's settings update flow, allowing a logged-in administrator to alter settings via CSRF. The issue is documented across multiple sources (NVD/Red Hat/CVE list) with the sam...