CVE-2024-8157

The CVE-2024-8157 entry concerns the WordPress Alphabetical List plugin (versions up to 1.0.3). The vulnerability is a CSRF weakness in the settings update flow: there is no CSRF protection when updating settings, which could allow a logged-in administrator to modify settings via CSRF. Affected c...