CVE-2023-37889 – WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

https://notcve.org/view.php?id=CVE-2023-37889

11 Jul 2023 — Cross-Site Request Forgery (CSRF) vulnerability in WPAdmin WPAdmin AWS CDN plugin <= 2.0.13 versions. The WPAdmin AWS CDN plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.13. This is due to missing nonce validation on several functions called via AJAX actions in the /admin/class-aws-cdn-admin.php file. This makes it possible for unauthenticated attackers to perform several unauthorized actions like managing cdn, certificate, domain, and exclusion setting... • https://patchstack.com/database/vulnerability/aws-cdn-by-wpadmin/wordpress-wpadmin-aws-cdn-plugin-2-0-13-cross-site-request-forgery-csrf?_s_id=cve • CWE-352: Cross-Site Request Forgery (CSRF) •