Medium severity4.3NVD Advisory· Published Jan 16, 2024· Updated Jun 17, 2026
CVE-2022-1760
CVE-2022-1760
Description
The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=1.2.1+ 1 more
- (no CPE)range: <=1.2.1
- (no CPE)range: <=1.2.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/c7906b1d-25c9-4f34-bd02-66824878b88e/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.