关键信息 漏洞名称: WordPress Interact: Embed A Quiz On Your Site Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF) 风险等级: Low priority 受影响版本: <= 3.1 官方修复: No official fix available 风险详情: - 类型: Cross Site Request Forgery (CSRF) - 描述: This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. 警告: This software is likely abandoned! It was last updated over a year ago and will likely not receive further updates or fixes. 解决方案: - Remove and replace software. 详细信息: - 软件: Interact: Embed A Quiz On Your Site - 类型: Plugin - 受影响版本: <= 3.1 - 插件ID: 458 时间线: - Reported by Ran - BlueRock on 17 Aug 2020 - Early warning sent out to Patchstack customers on 22 Sep 2020