WP Discord Invite, CVE-2023-5006

CVE, Research URL: CVE-2023-5006
Home page URL: Security reports for WP Discord Invite
Application: WP Discord Invite
Published on: Jan 17, 2024
Research Description: The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.
Affected versions: Min -, max 2.5.1.
Status: vulnerable