CVE-2023-24414

The Robo Gallery plugin before version 3.2.12 contains a cross-site request forgery (CSRF) vulnerability that could be exploited to trick authenticated users into performing unintended actions, such as changing admin passwords, which would grant attackers unauthorized access to the site. The vulnerability was discovered by thiennv, and as of the advisory date, the vendor had not released a fix or responded to disclosure attempts. An attacker could leverage this flaw to compromise administrator accounts and gain control over the WordPress installation.

Based on public CVE data (MITRE/NVD).