CyberRota Analysis
AI-GeneratedThe WOLF WordPress plugin prior to version 1.1.0 is vulnerable due to the absence of nonce or capability checks on specific AJAX actions, enabling unauthenticated attackers to exploit this flaw. This could lead to stored Cross-Site Scripting (XSS) by tricking logged-in administrators into injecting malicious content into posts. WordPress site administrators and security teams should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administrator into writing arbitrary content, including a malicious script, into a post via a cross-site request, resulting in stored Cross-Site Scripting.