WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)

CVE-2023-25709

What is CVE-2023-25709?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Plainware Locatoraid Store Locator plugin versions up to 3.9.11. This security flaw allows an attacker to exploit the user's browser to perform unauthorized actions on behalf of the user without their consent. When users visit a malicious site, their credentials may be compromised, leading to data leakage or modification of site content. Site administrators using the affected plugin are recommended to update to the latest version to mitigate this risk.

References