{"vulnerability": "cve-2022-1421", "sightings": [{"uuid": "ac55626a-f8ce-48b3-9c18-a06c3ffaf566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1421", "type": "seen", "source": "https://t.me/cibsecurity/44006", "content": "\u203c CVE-2022-1421 \u203c\n\nThe Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-08T14:45:55.000000Z"}, {"uuid": "10a0d872-b4c1-4242-aba2-852650a6c83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1421", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1122", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1421\nGithub: https://github.com/nb1b3k/CVE-2022-1421\nDescribe: \nThe Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack", "creation_timestamp": "2026-08-02T00:01:14.032053Z"}, {"uuid": "9b70c69a-0ca8-409f-abbe-669e384b6ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1421", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1122", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1421\nGithub: https://github.com/nb1b3k/CVE-2022-1421\nDescribe: \nThe Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack", "creation_timestamp": "2026-08-01T06:00:03.799594Z"}, {"uuid": "2578c4ee-9990-4adc-9c6e-be881c2d1169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1421", "type": "seen", "source": "https://t.me/CVEhub/1122", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1421\nGithub: https://github.com/nb1b3k/CVE-2022-1421\nDescribe: \nThe Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack", "creation_timestamp": "2026-07-29T12:01:05.484643Z"}, {"uuid": "74c4cf26-d110-4024-837c-83f65243aaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1421", "type": "seen", "source": "https://t.me/CVEhub/1122", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1421\nGithub: https://github.com/nb1b3k/CVE-2022-1421\nDescribe: \nThe Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack", "creation_timestamp": "2026-07-30T00:01:44.774963Z"}]}