CVE-2023-48331: 
WordPress vulnerability analysis and mitigation

Cross-Site Request Forgery (CSRF) vulnerability affects MyBookTable Bookstore by Stormhill Media plugin versions through 3.3.4. The vulnerability was discovered by Nguyen Xuan Chien and disclosed on November 23, 2023. This security issue allows potential cross-site request forgery attacks against the plugin (Patchstack).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery). It has received varying CVSS v3.1 scores: a base score of 8.8 (HIGH) from NVD with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a score of 4.3 (MEDIUM) from Patchstack with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N (NVD).

The vulnerability could allow malicious actors to force higher privileged users to execute unwanted actions under their current authentication (Patchstack).

The vulnerability requires no authentication to exploit but does require user interaction. The attack complexity is considered low, with no privileges required for exploitation (NVD).

The vulnerability has been patched in version 3.3.5 of the MyBookTable Bookstore plugin. Users are advised to update to version 3.3.5 or later to remove the vulnerability (Patchstack).