Cross-Site Request Forgery in Sunshine Photo Cart Plugin for WordPress

CVE-2021-4415

What is CVE-2021-4415?

The Sunshine Photo Cart plugin for WordPress is susceptible to Cross-Site Request Forgery attacks due to inadequate nonce validation within the sunshine_products_quicksave_post() function. This vulnerability allows unauthenticated attackers to exploit the system by sending crafted requests that can manipulate custom post data, provided they can deceive a site administrator into triggering the action. This makes it critical for website owners using this plugin to apply updates and ensure security measures to prevent unauthorized data manipulation.

References