CVE-2023-37974

11th percentile - higher than 11% of all known CVEs

The WP Social AutoConnect plugin by Justin Klein versions <= 4.6.1 has a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of a logged-in user.

This vulnerability may lead to unauthorized access to user accounts and potential privilege escalation. Organizations using this plugin are at risk of data loss and reputational damage.

It is recommended to update the WP Social AutoConnect plugin to the latest version to mitigate this vulnerability. Additionally, implementing CSRF protection mechanisms is advisable.