The Subscribers Text Counter WordPress plugin before 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lea…
CVSS 3.1MEDIUM 4.3·Network·No auth·User interaction·EPSS 0.00252·Published 2023-08-30·Fixed in 1.7.1CWE-352
