title: Syncee - Global Dropshipping < 1.0.10 - Authentication Token Disclosure
description: The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.
problem types: CWE-200 Information Exposure
affected:
{
vendor: Unknown
product: Syncee
collectionURL: https://wordpress.org/plugins
versions:
status: affected, versionType: custom, version: 0, lessThan: 1.0.10
defaultStatus: unaffected
}