TI-2024-07494 CVE-2024-8082 · GHSA-2cw7-7rj8-j2x7Widgets Reset <= 0.1 - Settings Update via CSRFPriority MEDIUM 53The Widgets Reset WordPress plugin through 0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00187 · Published 2025-05-15 · No fix listed CWE-352