CVE-2022-27847: 
WordPress vulnerability analysis and mitigation

Cross-Site Request Forgery (CSRF) vulnerability was discovered in Yoo Slider WordPress plugin versions 2.0.0 and earlier. The vulnerability was assigned CVE-2022-27847 and was disclosed on April 11, 2022. This security issue affects the template import functionality of the Yoo Slider plugin (Patchstack Advisory).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery). It received a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. The vulnerability requires user interaction to be exploited, as indicated by the UI:R component in the CVSS vector (NVD).

If exploited, this CSRF vulnerability could allow attackers to force privileged users to execute unwanted actions related to template imports while they are authenticated. The impact is considered low severity as it requires user interaction and only affects the template import functionality (Patchstack Advisory).

The vulnerability was fixed in Yoo Slider version 2.1.0. Users are advised to update to version 2.1.0 or later to remove the vulnerability. The security issue has a low severity impact and is unlikely to be exploited (Patchstack Advisory).