Cross-Site Request Forgery Vulnerability in Digital Publications Plugin for WordPress by Supsystic

CVE-2023-5756

Summary

The Digital Publications by Supsystic plugin for WordPress contains a vulnerability that allows unauthenticated attackers to exploit missing or incorrect nonce validation in the AJAX action handler. By crafting a forged request, these attackers can potentially trick site administrators into executing actions without their intent. This poses a risk to the integrity of affected WordPress sites, as it enables unauthorized operations that could compromise site security and user data.

References