CVE-2023-7083

Name of the Vulnerable Software and Affected Versions The Voting Record WordPress plugin versions 2.0 and earlier

Description The issue is related to the lack of CSRF check in some places, as well as missing sanitisation and escaping, which could allow attackers to make logged-in admins add Stored XSS payloads via a CSRF attack.

Recommendations For The Voting Record WordPress plugin versions 2.0 and earlier, consider updating to a version that includes the necessary CSRF checks and input sanitisation to prevent Stored XSS attacks. As a temporary workaround, restrict access to sensitive areas of the plugin to minimize the risk of exploitation.