Skip to content
Sign in
Not rated

CVE-2022-1895 The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the…

Description

The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
underConstruction 1.20 earliest → < 1.20 1.20

Other CVEs of underConstruction

The 2 CVEs of underConstruction →
CVE-2022-1896 The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own… Not rated
Track this CVE