Localize Remote Images <= 1.0.9 - Cross-Site Request Forgery via admin menu
mediumThe Localize Remote Images plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.9. This is due to missing or incorrect nonce validation on the anonymous function used for the plugin's admin menu. This makes it possible for unauthenticated attackers to modify the plugin'...
- CVSS:
- 5.3
- Affected:
- up to 1.0.9
- Fix:
- No patched version reported
- Disclosed:
- Aug 29, 2023