CVE-2023-7297

The TwitterPosts WordPress plugin (versions 1.0.0 through 1.0.2 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of proper CSRF checks when updating settings. This flaw could allow an attacker to force a logged-in administrator to modify plugin settings unexpectedly. To...