CVE-2023-51510: 
WordPress vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Atlas Gondal Export Media URLs WordPress plugin, affecting versions up to 1.0. The vulnerability was reported on September 29, 2023, by security researcher Nguyen Thi Huyen Trang (Skalucy) and was publicly disclosed on December 27, 2023. The vulnerability has been assigned CVE-2023-51510 with a CVSS score of 4.3 (Medium) (Patchstack).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery). It received a CVSS v3.1 base score of 4.3 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, requires user interaction, has unchanged scope, and can only impact integrity with low severity (Patchstack).

The vulnerability could allow malicious actors to force higher privileged users to execute unwanted actions under their current authentication. The severity is considered low, with potential impact primarily affecting the integrity of the system (Patchstack).

The vulnerability requires no authentication to exploit but does need user interaction. It is classified as having low attack complexity, making it relatively straightforward to exploit if the conditions are met (Patchstack).

The vulnerability has been fixed in version 2.0 of the Export Media URLs plugin. Users are advised to update to version 2.0 or later to remove the vulnerability. The security issue has a low severity impact and is considered unlikely to be exploited (Patchstack).