CVE-2024-8085

The PeoplePond WordPress plugin (versions 1.1.9 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks in certain areas. Additionally, the plugin lacks proper sanitization and escaping , which could allow an attacker to trick a logged-in administrator...