CVE-2022-46841

The Oxygen plugin for WordPress up to version 4.4 contains a cross-site request forgery vulnerability caused by inadequate nonce verification. An unauthenticated attacker could exploit this flaw to execute unintended actions on a site if they successfully deceive an administrator into visiting a malicious link or page. This vulnerability allows attackers to leverage administrative privileges without proper authorization.

Based on public CVE data (MITRE/NVD).