CVE-2023-6946

CVE-2023-6946 affects the WordPress plugin Autotitle for WordPress (pre-1.0.4). The root cause is absence of a CSRF check when updating plugin settings, enabling a logged-in admin (or attacker with similar access) to modify settings via a CSRF attack, which the reports also describe as enabling s...