CVE-2022-25952

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

CVE-2022-25952 WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

CVE-2022-25952

CVE-2022-25952 describes a Cross‑Site Request Forgery (CSRF) in the WordPress plugin Keywordrush Content Egg / Content Egg up to version 5.4.0 . The flaw affects the plugin’s ability to verify CSRF tokens in certain actions, enabling an authenticated attacker to trick an admin into performing uni...