VULNERABILITY INTELLIGENCE

CVE-2022-1895

CVSS score4.3 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2022-06-20

Last modified2026-06-17

Description

The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode, which could allow attackers to make a logged in admin perform such action via a CSRF attack