CVE-2020-36755

The CVE-2020-36755 entry refers to the WordPress Customizr theme (up to version 4.3.0) and identifies a Cross-Site Request Forgery flaw. The root cause is missing/incorrect nonce validation in the czr_fn_post_fields_save() function, which could allow unauthenticated attackers to post fields via a...