CVE-2022-1203
The CVE-2022-1203 issue affects the Content Mask WordPress plugin, prior to version 1.8.4.1. The root cause is missing authorization and CSRF checks in various AJAX actions, plus failure to validate the updated option belongs to the plugin, enabling any authenticated user (e.g., subscriber) to mo...