CVE-2022-2001

The CVE-2022-2001 entry concerns the WordPress plugin DX Share Selection. A CSRF/unauthenticated-elevation issue exists in versions up to 1.4 due to missing nonce protection in the dxss_admin_page() function of dx-share-selection.php. This allows an attacker to induce an administrator to perform ...

CVE-2022-2001

The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.4. This is due to missing nonce protection on the dxssadminpage function found in the /dx-share-selection.php file. This makes it possible for unauthenticated attackers to...

WordPress DX Share Selection plugin <= 1.4 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Sho Sakata Cryptography Laboratory at Tokyo Denki University in WordPress DX Share Selection plugin versions = 1.4. Solution Update the WordPress DX Share Selection plugin to the latest available versi...