CVE-2023-5006 (published 2024-01-17T14:31:48.144Z)
The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.
Affected products: Vendor: Unknown
Product: WP Discord Invite
Versions: 0