Description
WordPress Plugin Quotes Collection is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Quotes Collection version 1.5.5.1 is vulnerable; other versions may also be affected.
Remediation
Update to plugin version 1.5.6 or latest
References
Related Vulnerabilities
WordPress Plugin Judge.me Product Reviews for WooCommerce Cross-Site Scripting (1.3.20)
WordPress Plugin Booking Calendar Local File Inclusion (7.0)
PostgreSQL Improper Input Validation Vulnerability (CVE-2014-0066)
Dolibarr Other Vulnerability (CVE-2022-0414)
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)