Threats tagged 'ghsa-5647-2cr4-4573'

The Posts Navigation Links for Sections and Headings – Free by WP Masters WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 1.0.1. The vulnerability arises from missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page, allowing unauthenticated attackers to potentially update plugin settings if a site administrator is tricked into clicking a malicious link.