WPSolr WordPress Plugin Cross-Site Request Forgery Vulnerability Allowing Privilege Escalation

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WPSolr WordPress plugin, specifically in versions through 24.0. This vulnerability allows for privilege escalation, as it could enable an attacker to manipulate users with higher privileges into performing actions they did not intend to.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing attackers to gain higher-level access or rights within the WordPress site.

Remediation

Users of the WPSolr WordPress plugin should update to version 24.0.1 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
6.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.