CVE-2024-8286

The webtoffee-gdpr-cookie-consent WordPress plugin, in versions prior to 2.6.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks in certain bulk actions, which could allow an attacker to trick a logged-in administrator into performing unwanted ...