EPSS
Percentile
48.6%
The plugin is lacking a CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
jvn.jp/en/jp/JVN29428319/