Plugin icon

User Session Synchronizer

user-session-synchronizer
Plugin closed

Vulnerabilities:

2

Last Updated:

June 29, 2023

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2026-08-14
Title
User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-04-09
Title
User Session Synchronizer <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)