CVE-2021-4413

The CVE-2021-4413 entry concerns the WordPress Process Steps Template Designer plugin. Affected component: the plugin’s save() function. Root cause: missing or incorrect nonce validation enables Cross-Site Request Forgery (CSRF). Impact: unauthenticated attackers can save field icons via forged r...