The AuthorSure WordPress plugin versions up to and including 2.3 are vulnerable to Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation on the 'authorsure' page. This vulnerability allows unauthenticated attackers to trick site administrators into performing actions such as updating settings or injecting malicious scripts via forged requests. The vulnerability has a CVSS 3.1 score of 6.1, indicating a medium severity impact.