Nokaut Offers Box WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Nokaut Offers Box WordPress plugin, affecting versions through 1.4.0. The plugin lacks proper CSRF protection when updating settings, which could enable attackers to manipulate a logged-in admin into resetting the plugin.
Impact
Exploitation of this vulnerability could lead to an authenticated admin user unintentionally resetting the Nokaut Offers Box WordPress plugin.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.7remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.