DevriX Restrict User Registration WordPress Plugin Cross-Site Request Forgery Vulnerability Allowing Stored Cross-Site Scripting

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the DevriX Restrict User Registration WordPress plugin, specifically in versions through 1.0.1. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks.

Impact

Exploitation of this vulnerability allows for Stored Cross-Site Scripting, where injected scripts are executed when users visit the affected site.

Remediation

Users are advised to remove and replace the DevriX Restrict User Registration WordPress plugin, as it is likely abandoned and will not receive further updates or fixes. Patchstack has issued a virtual patch to mitigate this vulnerability.