CVE-2024-8091

Name of the Vulnerable Software and Affected Versions: Enhanced Search Box WordPress plugin versions 0.6.1 and earlier

Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Recommendations: For Enhanced Search Box WordPress plugin versions 0.6.1 and earlier, update to a version that includes a CSRF check to prevent unauthorized setting changes. As a temporary workaround, consider restricting access to the settings update functionality until a patch is available.