PT-2022-13875

Name of the Vulnerable Software and Affected Versions Discy WordPress theme versions prior to 5.2 Description The issue allows an attacker to trick an admin into resetting the site settings back to defaults by not checking for CSRF tokens in the AJAX action discy reset options. Recommendations Fo...