CVE-2023-25480

The Post and Page Builder by BoldGrid plugin before version 1.24.2 contains a cross-site request forgery vulnerability affecting the submitDefaultEditor function, which fails to properly verify nonce tokens. An attacker could exploit this flaw by deceiving an administrator into clicking a malicious link, allowing the attacker to modify the plugin's editor preferences without proper authorization. This vulnerability impacts unauthenticated attackers and only requires social engineering to execute successfully.

Based on public CVE data (MITRE/NVD).