WordPress WP Championship plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Championship plugin versions prior to 9.3 are vulnerable to cross-site request forgery, which stems from a lack of CSRF checks. An attacker could exploit this vulnerability to enable an admin user to perform settings to create, delete, and update plugins.