CVE-2022-2224

The CVE-2022-2224 entry concerns the WordPress plugin Gallery for Social Photo. Several connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability due to improper nonce validation in the function gifeed_duplicate_feed, allowing unauthenticated attackers to duplicate existing post...