CVE-2022-2001

The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...

CVE-2022-2001

The CVE-2022-2001 entry concerns the WordPress plugin DX Share Selection. A CSRF/unauthenticated-elevation issue exists in versions up to 1.4 due to missing nonce protection in the dxss_admin_page() function of dx-share-selection.php. This allows an attacker to induce an administrator to perform ...