CVE-2022-2762

Summary: CVE-2022-2762 affects the AdminPad WordPress plugin, versions prior to 2.2, where there is no CSRF check when updating an admin’s note. This allows a CSRF attack to cause a logged-in admin to update notes without proper authorization. Root cause: missing CSRF validation in the note-updat...