WP Simple Spreadsheet Fetcher for Google, f8fce47113e556ee0530bb8582de7956f1271b31

CVE, Research URL: f8fce47113e556ee0530bb8582de7956f1271b31
Home page URL: Security reports for WP Simple Spreadsheet Fetcher for Google
Application: WP Simple Spreadsheet Fetcher for Google
Published on: Jan 05, 2020
Research Description: WP Simple Spreadsheet Fetcher for Google [wp-simple-spreadsheet-fetcher-for-google] < 0.3.7 WP Simple Spreadsheet Fetcher for Google < 0.3.7 - Cross-Site Request Forgery The WP Simple Spreadsheet Fetcher for Google plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 0.3.7. This is due to missing or incorrect nonce validation on the render_settings function. This makes it possible for unauthenticated attackers to arbitrarily change plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 0.3.7.
Status: vulnerable