CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Cross Site Request Forgery.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
The PawFriends WordPress theme versions 1.3 and earlier are vulnerable to cross-site request forgery (CSRF) attacks. An attacker can craft a malicious webpage that, when visited by a logged-in site administrator, performs unwanted actions on the site without their knowledge. This could allow modification of site settings or data. The vulnerability requires user interaction—the admin must visit the attacker's page while logged in.
What an attacker can do
Trick a logged-in admin into performing unwanted actions on the site by visiting a malicious webpage.
Potential impact on your site
Site admins could unknowingly modify settings or data if they visit a malicious link while logged in to the WordPress dashboard.
Conditions required to exploit
Admin must be logged in and visit an attacker-controlled webpage; no special privileges or authentication by the attacker required.
Key dates
External resources
Related vulnerabilities
