TI-2024-09895 CVE-2024-10677 · GHSA-wjgg-2chr-56vmBTEV <= 2.0.2 - Settings Update via CSRFPriority MEDIUM 53The BTEV WordPress plugin through 2.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0019 · Published 2025-05-15 · No fix listed CWE-352