CVE-2022-1591

CVE-2022-1591 affects the WordPress Ping Optimizer plugin for WordPress, versions prior to 2.35.1.3.0. The issue is a lack of CSRF protection when updating plugin settings, which could allow an attacker to induce a logged-in admin to change settings via a CSRF attack. The available connected sour...

CVE-2022-30705

Summary: CVE-2022-30705 affects the WordPress Ping Optimizer plugin by Pankaj Jha, with CSRF in versions <= 2.35.1.2.3. The issue stems from cross-site request forgery handling in the plugin’s admin actions. Impact (as stated): potential CSRF exploitation leading to unauthorized actions within...