CVE-2022-3694

HIGH 7.5CVE-2022-3694 · Published 05/12/2022 · updated 17/06/2026

In short

CVE-2022-3694 is a HIGH (CVSS 7.5) vulnerability affecting syncee - global dropshipping (syncee).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.5% of all vulnerabilities.
Fix: update to 1.0.10 or later.

Package	Affected versions	Patched versions
syncee - global dropshipping syncee	`< 1.0.10`	`1.0.10`

The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.