CVE-2022-2108

The CVE-2022-2108 entry concerns the WordPress plugin Wbcom Designs – BuddyPress Group Reviews for WordPress (versions up to and including 2.8.3). Technical details across connected documents show a vulnerability due to missing capability checks and improper nonce checks in multiple AJAX/settings...