PT-2025-13091 · Unknown · Nks Publish Post Email Notification

Publicado 2025-03-27 · Atualizado 2025-03-27 · CVE-2025-30816

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nks publish post email notification versions 1.0.2.3 and earlier

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that affects the publish post email notification, allowing unauthorized requests to be made.

Recommendations For versions 1.0.2.3 and earlier, consider disabling the email notification feature until a patch is available to prevent potential CSRF attacks.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2025-30816

Produtos afetados

Nks Publish Post Email Notification

Referências · 4

• https://twitter.com/CVEnew/status/1905220141262000582 · Publicação no Twitter
• https://patchstack.com/database/wordpress/plugin/publish-post-email-notification/vulnerability/wordpress-publish-post-email-notification-plugin-1-0-2-3-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Plugin/publish-post-email-notification/vulnerability/wordpress-publish-post-email-notification-plugin-1-0-2-3-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-30816 · Nota de Segurança