title: WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
description: The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in administrator to submit a crafted request.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: WP Discord Invite
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.5.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}