CVE-2022-3694

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account...

CVE-2022-3694 Syncee - Global Dropshipping < 1.0.10 - Authentication Token Disclosure

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account...

CVE-2022-3694

CVE-2022-3694 (Syncee WordPress plugin) : The Syncee WordPress plugin prior to version 1.0.10 leaks the administrator token, enabling an attacker to take over the administrator account. Affected software: Syncee WordPress plugin versions before 1.0.10. Root cause: disclosure of an authentication ...