CVE-2023-2330: 
WordPress vulnerability analysis and mitigation

The Caldera Forms Google Sheets Connector WordPress plugin before version 1.3 contains a Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2023-2330. The vulnerability was discovered and publicly disclosed on June 26, 2023. This security issue affects WordPress installations using the Caldera Forms Google Sheets Connector plugin versions prior to 1.3 (WPScan).

The vulnerability stems from the absence of CSRF protection mechanisms when updating the Access Code in the plugin. The CVSS score for this vulnerability is rated at 6.3 (medium), and it is classified under CWE-352. The vulnerability falls under the OWASP Top 10 category A2: Broken Authentication and Session Management (WPScan).

When exploited, this vulnerability could allow attackers to manipulate the Access Code settings of the plugin to an arbitrary value through a CSRF attack, potentially compromising the integration between Caldera Forms and Google Sheets (WPScan).

The vulnerability has been patched in version 1.3 of the Caldera Forms Google Sheets Connector plugin. Users are strongly advised to update their installations to this version or later to protect against potential CSRF attacks (WPScan).