PT-2025-30994 · WordPress · Memory Usage

Wesley

·

CVE-2025-8104

·

Publicado

2025-07-27

·

Atualizado

2025-07-27

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Memory Usage plugin for WordPress versions prior to 3.99
Description The Memory Usage plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing nonce validation in the wpmemory install plugin() function. This allows unauthenticated attackers to silently install whitelisted plugins via a forged request if they can trick a site administrator into performing an action.
Recommendations Update the Memory Usage plugin to version 3.99 or later.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-8104

Produtos afetados

Memory Usage