Webcamconsult WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Webcamconsult plugin for WordPress, affecting all versions through 1.5.0. The vulnerability arises from inadequate nonce validation, allowing unauthenticated attackers to manipulate settings and inject harmful scripts by tricking an administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings and the injection of malicious scripts, which could be executed in the context of the affected user.

Remediation

Users are advised to update the Webcamconsult WordPress plugin to version 1.6.0 or later.