CVE-2022-35730

CVE-2022-35730 affects the WordPress Oceanwp sticky header plugin: versions ≤ 1.0.8 are without CSRF protections in multiple areas, enabling CSRF-style actions by authenticated users. The vulnerability’s documentation notes remediation by upgrading to a version newer than 1.0.8, though Patchstack...