CVE-2022-1422

Name of the Vulnerable Software and Affected Versions Discy WordPress theme versions prior to 5.2

Description The issue allows an attacker to trick an admin into resetting the site settings back to defaults by not checking for CSRF tokens in the AJAX action discy reset options.

Recommendations For versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the discy reset options AJAX action to minimize the risk of exploitation.