CVE-2016-20083

Name of the Vulnerable Software and Affected Versions WordPress More Fields Plugin version 2.1

Description Cross-site request forgery (CSRF) occurs when a web application allows an attacker to induce a user to perform actions they do not intend to. This issue allows attackers to perform unauthorized actions by disabling CSRF token validation. By crafting malicious web pages, attackers can trick logged-in administrators into adding or deleting custom fields and boxes on the Write/Edit page through POST and GET requests to the 'options-general.php' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.