CVE-2024-0590

The CVE-2024-0590 entry concerns the Microsoft Clarity WordPress plugin (versions up to and including 0.9.3). It describes a Cross-Site Request Forgery (CSRF) vulnerability caused by missing nonce validation on the edit_clarity_project_id() function, enabling unauthenticated attackers to change t...