Trinity Audio WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Trinity Audio Text to Speech WordPress plugin, in all versions through 5.20.2. The issue arises from inadequate nonce validation in the post management administration file, allowing unauthenticated attackers to manipulate post activation or deactivation by tricking an administrator into clicking a link.

Impact

Exploitation enables unauthorized post activation or deactivation by manipulating an administrator into performing a related action.

Remediation

Users can update to version 5.21.0 or a newer patched version to address this vulnerability.