CVE-2024-8157

The Alphabetical List WordPress plugin, in versions 1.0.0 through 1.0.3 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a failure to implement adequate CSRF checks when updating plugin settings. This flaw could allow an attacker to perform unauthorized changes to ...