CVE-2022-1421

CVE-2022-1421 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Discy WordPress theme prior to version 5.2. This flaw allows an unauthenticated attacker to trick a logged-in administrator into unknowingly changing arbitrary settings, including payment methods, through malicious AJAX actions. Rated Medium severity (CVSS 4.3), the attack requires user interaction but has low attack complexity, potentially leading to unauthorized modification of settings. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.