PT-2026-31099

The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing nonce validation in the quran playlist options function that handles the plugin's settings page. The function processes POST requests to update...