CSRF Vulnerability in Sitepress Multilingual CMS Plugin for WordPress
CVE-2020-10568
8.8HIGH
What is CVE-2020-10568?
The Sitepress Multilingual CMS plugin for WordPress, prior to version 4.3.7-b.2, is susceptible to a Cross-Site Request Forgery (CSRF) due to a loose type comparison in its code. This vulnerability allows attackers to exploit unintended comparisons between integers and strings, potentially leading to remote code execution by crafting specific requests. Admins are advised to update the plugin to the latest version to mitigate risks associated with this vulnerability and safeguard their WordPress sites.