CVE-2021-4426

CVE-2021-4426 affects the Absolute Reviews plugin for WordPress (versions up to and including 1.0.8). The root cause is missing or incorrect nonce validation in the metabox_review_save() function, enabling Cross-Site Request Forgery. An unauthenticated attacker could trick a site administrator in...