CVE-2023-47775

The wpDiscuz plugin before version 7.6.12 contains a cross-site request forgery flaw stemming from inadequate nonce verification in certain functions. An attacker could exploit this weakness to manipulate site administrators into unknowingly triggering actions that dismiss administrative notices through a crafted request. This vulnerability affects unauthenticated users, requiring only that they deceive an administrator into interacting with a malicious link.

Based on public CVE data (MITRE/NVD).