CVE-2022-1957

CVE-2022-1957 concerns the WordPress plugin Comment License prior to version 1.4.0. Affected component: the plugin’s settings update flow, which lacks CSRF verification. Root cause: missing CSRF check during settings updates. Impact: could allow an attacker to alter settings by inducing a logged-...