saturngod vulnerabilities and threats

The Zawgyi Embed WordPress plugin versions up to and including 2.1.1 contain a Cross-Site Request Forgery (CSRF) vulnerability due to missing or incorrect nonce validation in the zawgyi_adminpage function. This vulnerability allows an unauthenticated attacker to trick a site administrator into submitting a forged POST request that updates the plugin's zawgyi_forceCSS setting. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.