WordPress Plugin Central Cross-Site Request Forgery Vulnerability Allowing Path Traversal
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Plugin Central plugin, specifically in versions through 2.5.1. This vulnerability allows for path traversal, potentially leading to unauthorized file access or manipulation.
Impact
Exploitation of this vulnerability could allow a malicious actor to trick users with higher privileges into performing actions they did not intend to, such as deleting files or modifying plugin settings.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
6.4remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.