Comment Info Detector WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Comment Info Detector plugin for WordPress, affecting all versions through 1.0.5. The vulnerability arises from a lack of nonce validation in the options.php file during form submissions. This flaw allows unauthenticated attackers to alter plugin settings by sending a forged request, provided they can deceive a site administrator into clicking a link.

Impact

Exploitation of this vulnerability allows for unauthorized modification of plugin settings by tricking an administrator into performing an action.