CVE-2024-1360

CVE-2024-1360 affects the Colibri WP Theme for WordPress. The issue is a Cross-Site Request Forgery due to missing or incorrect nonce validation in the colibriwp_install_plugin() function, permitting unauthenticated attackers to cause a site admin to install requested plugins by tricking them int...