The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCreditsDaniel RufReferenceshttps://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515
