PT-2025-21509
CVE-2024-8050
·
Published
2024-09-13
·
Updated
2025-05-15
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
The Custom Author Base WordPress plugin versions 1.1.1 and earlier
Description:
The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Recommendations:
For The Custom Author Base WordPress plugin versions 1.1.1 and earlier, update to a version that includes a CSRF check to prevent such attacks.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾