CVE-2024-10677

The BTEV WordPress plugin (versions 2.0.2 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating plugin settings. This flaw could allow an attacker to trick a logged-in administrator into making unauthorized changes to the plugin's con...