CVE-2024-7820

Name of the Vulnerable Software and Affected Versions ILC Thickbox WordPress plugin version 1.0

Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Recommendations For ILC Thickbox WordPress plugin version 1.0, consider disabling the settings update functionality until a patch is available to prevent potential CSRF attacks. Restrict access to the plugin's settings to minimize the risk of exploitation.