CVE-2023-36693

CVE-2023-36693 describes a CSRF vulnerability in the WordPress plugin WP RSS Images, version <= 1.1. The root cause noted in Patchstack is insufficient nonce verification, enabling unauthenticated CSRF. Public references confirm the vulnerability affects unauthenticated users and can enable CS...