CVE-2023-25058

The WordPress Schema – All In One Schema Rich Snippets plugin versions before 1.6.6 contain a cross-site request forgery vulnerability that could enable attackers to trick authenticated users into performing unintended actions on the site. A malicious actor could potentially leverage this flaw to modify user passwords or take over administrative accounts by forcing higher-privileged users to execute harmful requests without their knowledge. The vulnerability was discovered by Rio Darmawan and has been patched in version 1.6.6 and later.

Based on public CVE data (MITRE/NVD).