CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Cross Site Request Forgery.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a through <= 1.25.
Explanation of Vulnerability in Simple Terms
WP Attractive Donations System contains a cross-site request forgery (CSRF) vulnerability affecting versions up to 1.25. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions such as modifying donation settings or creating fraudulent transactions. The vulnerability requires user interaction and does not expose sensitive data directly.
What an attacker can do
Trick a logged-in admin into performing unwanted actions like changing donation settings or processing unauthorized transactions.
Potential impact on your site
Donation settings could be altered, fraudulent transactions created, or site configuration changed without admin knowledge or consent.
Conditions required to exploit
Admin must visit attacker's webpage while logged into WordPress. No special privileges or authentication required from attacker.
Key dates
External resources
