Description
WordPress Plugin TinyMCE Advanced is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin TinyMCE Advanced version 4.1 is vulnerable; other versions may also be affected.
Remediation
Edit the source code to ensure that CSRF protection is implemented with Nonce-like mechanism
References
Related Vulnerabilities
WordPress Plugin AdSanity Arbitrary File Upload (1.8.1)
WordPress Plugin Advanced Custom Fields:reCAPTCHA Field Security Bypass (1.1.1)
WordPress Plugin AdWizz 'link' Parameter Cross-Site Scripting (1.0)
Oracle Database Server CVE-2009-1994 Vulnerability (CVE-2009-1994)
PostgreSQL Incorrect Authorization Vulnerability (CVE-2021-20229)