WordPress WP-Recall Plugin Cross-Site Request Forgery Vulnerability Allowing Privilege Escalation

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress WP-Recall plugin, specifically in versions through 16.26.14. This vulnerability allows for privilege escalation, as it could enable a malicious actor to trick users with higher privileges into performing actions they did not intend to.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed by users with elevated privileges, potentially allowing for further exploitation or changes within the application.