CVE-2023-33931

17th percentile - higher than 17% of all known CVEs

The Ciprian Popescu YouTube Playlist Player plugin versions up to 4.6.4 contains a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of the user.

Organizations using this plugin may be exposed to unauthorized operations, potentially leading to data loss or user security breaches.

It is recommended to update the plugin to the latest version to mitigate this vulnerability and implement additional security measures against CSRF attacks.