CVE-2022-2762

The AdminPad WordPress plugin before 2.2 does not have CSRF check when updating admin’s note, allowing attackers to make a logged in admin update their notes via a CSRF attack

Date published : 2022-10-25

https://wpscan.com/vulnerability/cf0b3893-3283-46d6-a497-f3110a35d42a