Rafasashi User Session Synchronizer
2 CVEs affecting Rafasashi User Session Synchronizer. Latest disclosed: 2026-08-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15341 | Critical | 9.8 | 2026-08-15 | The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4… |
CVE-2025-32612 | High | 7.1 | 2025-04-09 | Cross-Site Request Forgery (CSRF) vulnerability in rafasashi User Session Synchronizer user-session-synchronizer allows Stored XSS.This issue affects User Sess… |