CVE-2022-3694

7.5 highEPSS 0.9%

High (7.5) in syncee syncee - global dropshipping. EPSS 0.9% chance of exploitation in the next 30 days.

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.

Severity

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
Published: 2022-12-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19