CVE-2022-3694 in Syncee Plugin

요약

\~에 의해 MITRE • 2022. 12. 05.

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 예약하다: 2022. 10. 26.
• 공개: 2022. 12. 05.
• 모더레이션: 수락
• 항목: VDB-214882
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 7.5 (NVD)
• EPSS: 0.00826
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3694
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3694
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3694/