WP Simple Spreadsheet Fetcher for Google < 0.3.7 - Cross-Site Request Forgery
highThe WP Simple Spreadsheet Fetcher for Google plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 0.3.7. This is due to missing or incorrect nonce validation on the render_settings function. This makes it possible for unauthenticated attackers to arbitrarily change plugin settings via a f...
- CVSS:
- 8.8
- Affected:
- up to 0.3.7
- Fixed in:
- 0.3.7
- Disclosed:
- Jan 5, 2020