CVE-2022-1900

The CVE-2022-1900 issue affects the Copify plugin for WordPress (versions up to 1.3.0). Root cause: missing nonce validation on the CopifySettings page, enabling CSRF. Impact: unauthenticated attackers could update plugin settings and inject malicious scripts via forged requests if a site adminis...