CVE-2022-1832

The CVE-2022-1832 entry concerns the CaPa Protect WordPress plugin (versions up to 0.5.8.2). The vulnerability arises from a missing CSRF check when updating settings, enabling a logged-in attacker to coerce an admin into changing settings and potentially disable the protection. Exploitation is v...