CVE-2016-20074

Name of the Vulnerable Software and Affected Versions WordPress Lazy Content Slider Plugin version 3.4

Description Cross-site request forgery (CSRF) allows attackers to perform unauthorized actions by crafting malicious HTML forms. Authenticated administrators can be tricked into submitting POST requests to the plugin settings page via the 'lzcs admin.php' endpoint to modify configuration parameters such as lzcs color and lzcs count.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.