Simple Crypto Shortcodes WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Simple Crypto Shortcodes plugin for WordPress, affecting versions through 1.0.2. The vulnerability arises from a lack of nonce validation in the 'scs_backend' function, allowing unauthenticated attackers to manipulate plugin settings by tricking a site administrator into clicking a link.

Impact

Exploitation of this vulnerability allows for unauthorized changes to plugin settings, potentially leading to further security issues or misuse of the plugin's functionality.