CVE-2020-5530: 
WordPress vulnerability analysis and mitigation

Cross-site request forgery (CSRF) vulnerability was discovered in Easy Property Listings WordPress plugin versions prior to 3.4. The vulnerability was disclosed on February 18, 2020, affecting the plugin's authentication system (JVN Advisory, NVD).

The vulnerability allows remote attackers to hijack the authentication of administrators via unspecified vectors. The CVSS v3.1 base score is 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-352: Cross-Site Request Forgery (NVD).

If a user views a malicious page while logged in as an administrator, an attacker could potentially perform unauthorized operations on their behalf. This could lead to compromise of confidentiality, integrity, and availability of the affected system (JVN Advisory).

The vulnerability requires user interaction, where an authenticated administrator needs to visit a malicious page for the attack to be successful. The attack vector is network-accessible with low attack complexity (NVD).

Users should update the Easy Property Listings plugin to version 3.4 or later to address this vulnerability. The fix has been provided by the developer in the updated version (JVN Advisory, WordPress Plugin).