PT-2024-27948 · WordPress · Sola Testimonials
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Sola Testimonials versions prior to 3.0.0
Description
A cross-site request forgery issue exists, allowing an attacker to trick a user into accessing a malicious page when logged in to a WordPress site with the affected plugin enabled. This could result in the user performing unintended operations on the site.
Recommendations
For versions prior to 3.0.0, update to version 3.0.0 or later to resolve the issue.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sola Testimonials