Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress Cursor Plugin plugin < 3.2 versions.
Date: 2023-11
Affected: hamidrezasepehr/custom_cursors
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2023-32739
CWE: CWE-352
CVSS: 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)

Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress Cursor Plugin plugin < 3.2 versions.


Mitigations:

Architectural layers (MAESTRO):