CVE-2023-28986

Name of the Vulnerable Software and Affected Versions wpaffiliatemgr Affiliates Manager plugin versions <= 2.9.20

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions <= 2.9.20, update to a version higher than 2.9.20 to resolve the issue. As a temporary workaround, consider implementing additional validation for requests to prevent unauthorized actions. Restrict access to sensitive areas of the plugin to minimize the risk of exploitation.