CVE-2022-1828

Name of the Vulnerable Software and Affected Versions PDF24 Articles To PDF WordPress plugin versions 4.2.2 and earlier

Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could potentially lead to unauthorized changes to the plugin's settings.

Recommendations For PDF24 Articles To PDF WordPress plugin versions 4.2.2 and earlier, consider updating to a version that includes a CSRF check for settings updates, or as a temporary workaround, restrict access to the settings update functionality to minimize the risk of exploitation.