CVE-2020-36746

The CVE-2020-36746 entry concerns the Menu Swapper WordPress plugin. A CSRF flaw exists in versions up to 1.1.0.2 due to missing or incorrect nonce validation in the mswp_save_meta() function, enabling unauthenticated attackers to save metadata by crafting requests and tricking an administrator. ...