WordPress Constructo Theme Cross-Site Request Forgery Vulnerability Allowing Object Injection

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Constructo theme, specifically in versions through 4.3.9. This vulnerability allows for Object Injection, where an attacker could potentially manipulate objects within the application, leading to unexpected behavior or security issues.

Impact

Exploitation of this vulnerability could enable a malicious actor to trick users with higher privileges into performing actions they did not intend to, potentially leading to unauthorized changes or access within the application.