CVE-2023-0497

The CVE concerns HT Portfolio WordPress plugin prior to version 1.1.6 lacking a CSRF check when activating plugins. This CSRF flaw could allow an authenticated attacker to trigger activation of arbitrary plugins by enticing a logged-in admin to visit a malicious page. Publicly available details i...