CVE-2018-16634

Name of the Vulnerable Software and Affected Versions Pluck version 4.7.7

Description The issue allows for CSRF via the admin.php?action=settings endpoint. This can potentially be exploited by tricking an administrator into performing unintended actions.

Recommendations For Pluck version 4.7.7, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent exploitation. As a temporary workaround, restrict access to the admin.php?action=settings endpoint to minimize the risk of exploitation.