MainWP Matomo Extension <= 4.0.4 - Cross-Site Request Forgery
mediumThe MainWP Matomo Extension for WordPress is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to invoke functions normally intended for higher-privileged users such as administrators via forged request granted they can trick a si...
- CVSS:
- 4.3
- Affected:
- up to 4.0.4
- Fixed in:
- 4.0.5
- Disclosed:
- Jan 17, 2023