CVE-2024-23510: 
WordPress vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the WordPress plugin Don't Muck My Markup, affecting versions up to 1.8. The vulnerability was reported by Nguyen Xuan Chien on October 12, 2023, and was publicly disclosed on January 30, 2024. The vulnerability has been assigned CVE-2024-23510 and received a CVSS v3.1 score of 4.3 (Medium) (Patchstack).

The vulnerability is classified as a Cross-Site Request Forgery (CSRF) issue, identified as CWE-352. It received a CVSS v3.1 Base Score of 4.3 with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability can be exploited remotely, requires low attack complexity, needs no privileges, but does require user interaction (Patchstack).

The vulnerability could allow malicious actors to force higher privileged users to execute unwanted actions under their current authentication. The severity is considered low, and the vulnerability is unlikely to be exploited (Patchstack).

The vulnerability can be exploited by unauthenticated users, though it requires user interaction. The attack vector is network-accessible (Patchstack).

Currently, there is no official fix available for this vulnerability. The issue affects versions up to 1.8 of the Don't Muck My Markup WordPress plugin (Patchstack).