rafasashi User Session Synchronizer

• CVE-2026-15341 Critical 9.8 User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters 0.6%
• CVE-2025-32612 High 7.1 WordPress User Session Synchronizer plugin <= 1.4.0 - CSRF to Stored XSS vulnerability 0.2%