CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the publish_save_option function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Explanation of Vulnerability in Simple Terms
Publish Approval versions 1.1 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unauthorized actions on the site without the admin's knowledge or consent. The vulnerability requires no special privileges or user interaction beyond visiting a page.
What an attacker can do
Perform unauthorized actions on the site by tricking a logged-in admin into visiting a malicious webpage.
Potential impact on your site
Attackers can modify site content or settings through CSRF attacks targeting your administrators.
Conditions required to exploit
A site administrator must visit an attacker-controlled webpage while logged into the site.
Key dates
External resources
Related vulnerabilities
