Description
WordPress Plugin WP-FB-AutoConnect is prone to multiple cross-site request forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin WP-FB-AutoConnect version 4.0.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 4.0.6 or latest
References
Related Vulnerabilities
MediaWiki Other Vulnerability (CVE-2023-37300)
MySQL CVE-2022-21289 Vulnerability (CVE-2022-21289)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2024-30044)
MySQL CVE-2017-10311 Vulnerability (CVE-2017-10311)
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502)