CVE-2022-1844

Name of the Vulnerable Software and Affected Versions WP Sentry WordPress plugin versions 1.0 and earlier

Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This could lead to Stored Cross-Site Scripting due to the lack of sanitization and escaping.

Recommendations For WP Sentry WordPress plugin versions 1.0 and earlier, update to a version that includes a CSRF check and proper sanitization and escaping to prevent Stored Cross-Site Scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.