LWS Tools < 2.4.2 - Cross-Site Request Forgery

The plugin does not adequately verify requests use nonces, making it vulnerable to Cross-Site Request Forgery CSRF attacks...

WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software LWS Tools Type Plugin Vulnerable versions = 2.3.1 Fixed in 2.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27453 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 84c0768bd7ad Credits Abdi Pranata Required...