Star Review Manager WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Star Review Manager plugin for WordPress, affecting all versions through 1.2.2. The vulnerability arises from a lack of nonce validation on the settings page, allowing unauthenticated attackers to manipulate the plugin's CSS settings. Exploitation requires tricking a site administrator into clicking a link that initiates the forged request.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can impersonate a user and perform actions on their behalf, potentially leading to unauthorized changes in the plugin's settings.