WordPress Spreadsheet Integration Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Spreadsheet Integration plugin for WordPress, affecting all versions through 3.8.2. The issue arises from inadequate nonce validation in the 'class-wpgsi-show.php' file, allowing unauthenticated attackers to publish arbitrary posts, including private ones, by tricking a site administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized publication of posts, including private ones, on behalf of the administrator.

Remediation

Users are advised to update the Spreadsheet Integration plugin to version 3.8.3 or later.