2 matches found
Cross site request forgery (csrf)
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discyresetoptions, allowing an attacker to trick an admin into resetting the site settings back to defaults...
4.3CVSS6.4AI score0.00542EPSS
SaveExploits2References1Affected Software1
CVE-2022-1422: Cross-Site Request Forgery (CSRF)
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discyresetoptions, allowing an attacker to trick an admin into resetting the site settings back to defaults...
6.5CVSS6.5AI score0.00542EPSS
SaveExploits2References2
20