Cross-Site Request Forgery (CSRF) vulnerability in ReCorp AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatGPT, Image Generator) All in One plugin <= 1.1.5 versions.
Date: 2023-10
Affected: rayhan1/ai_content_writing_assistant
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2023-45063
CWE: CWE-352
CVSS: 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)

Cross-Site Request Forgery (CSRF) vulnerability in ReCorp AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatGPT, Image Generator) All in One plugin <= 1.1.5 versions.


Mitigations:

Architectural layers (MAESTRO):