CVE-2023-6946: Cross-Site Request Forgery (CSRF)

The Autotitle for WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

PT-2024-15134

Name of the Vulnerable Software and Affected Versions Autotitle for WordPress plugin versions 1.0.0 through 1.0.3 Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendatio...