CVE-2021-23227

CVE-2021-23227 concerns the WordPress PHP Everywhere plugin, where versions ≤ 2.0.2 are vulnerable to a CSRF flaw due to missing CSRF checks when updating settings. Multiple connected sources (WPVulnDB entry, PatchStack, PT-2022-9381, CNNVD, etc.) describe this CSRF, including an indication that ...