CVE-2024-8091

CVE-2024-8091 concerns the Enhanced Search Box WordPress plugin (≤ 0.6.1). The issue is a missing CSRF check when updating plugin settings, which could allow a logged-in attacker to induce an admin to change settings via CSRF. Impact described across Red Hat and CVE records aligns with unauthoriz...