CVE-2024-8050

The Custom Author Base WordPress plugin (versions 1.1.1 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating plugin settings. An attacker could potentially force a logged-in administrator to modify these settings unknowin...