The plugin does not have CSRF check in place in some places, which could allow attackers to make a logged in admin perform unwanted actions
CSRF
Vlad Vector
No
2022-08-01 (about 1 years ago)
2022-08-24 (about 1 years ago)
2023-05-17 (about 4 months ago)