CVE-2022-1895

Name of the Vulnerable Software and Affected Versions underConstruction WordPress plugin versions prior to 1.20

Description The issue concerns a lack of CSRF check when deactivating construction mode, potentially allowing attackers to trick logged-in admins into performing unintended actions through a CSRF attack.

Recommendations For versions prior to 1.20, update to version 1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the construction mode deactivation feature to minimize the risk of exploitation.