Description
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Syncee | < 1.0.10 | 1.0.10 |
References
- https://wpscan.com/vulnerability/ad12bab7-9baf-4646-a93a-0d3286407c1e exploit vdb-entry technical-description