TI-2023-06582 CVE-2023-7196 · GHSA-942h-7wq8-4623Ultimate Noindex Nofollow Tool <= 1.1.2 - Settings Update via CSRFPriority MEDIUM 53The Ultimate Noindex Nofollow Tool WordPress plugin through 1.1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00208 · Published 2025-05-15 · No fix listed CWE-352
