WordPress Challan Plugin Cross-Site Request Forgery Vulnerability Allowing Privilege Escalation

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Challan plugin, specifically in versions through 3.7.58. This vulnerability allows for privilege escalation by forcing higher-privileged users to perform unintended actions under their current authentication.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed by users with higher privileges, potentially allowing for further escalation or abuse of those privileges.

Remediation

Users of the WordPress Challan plugin should update to version 3.7.59 or later to address this vulnerability.