CVE-2023-7195

The WP-Reply Notify WordPress plugin (versions 1.1 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating settings. An attacker could leverage this to perform unauthorized configuration changes on behalf of a logged-in administrator. T...