CVE-2024-2326

The Pretty Links plugin for WordPress contains a Cross-Site Request Forgery vulnerability affecting versions 3.6.3 and earlier that stems from inadequate nonce verification during settings updates. An attacker could exploit this by crafting a malicious request that modifies plugin configuration, including Stripe integration settings, if they convince an administrator to click a link. This flaw allows unauthenticated threat actors to alter sensitive plugin options without proper authorization checks.

Based on public CVE data (MITRE/NVD).