PT-2025-27177 · WordPress · Blend Media Wordpress Cta

Nguyen Xuan Chien

·

CVE-2025-53270

·

Publicado

2025-06-27

·

Atualizado

2025-06-27

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Blend Media WordPress CTA versions 1.6.9 and earlier
Description: A Cross-Site Request Forgery (CSRF) issue affects the Blend Media WordPress CTA, allowing unauthorized requests.
Recommendations: For Blend Media WordPress CTA versions 1.6.9 and earlier, update to a version that includes a fix for this issue. As a temporary workaround, consider implementing additional validation for requests to minimize the risk of exploitation.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-53270

Produtos afetados

Blend Media Wordpress Cta