CVE-2023-2330

Name of the Vulnerable Software and Affected Versions Caldera Forms Google Sheets Connector WordPress plugin versions prior to 1.3

Description The issue is related to the lack of a CSRF check when updating the Access Code in the Caldera Forms Google Sheets Connector WordPress plugin. This could allow attackers to make a logged-in admin change the access code to an arbitrary one via a CSRF attack.

Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.