uxper Civi Framework Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability exists in the uxper Civi Framework plugin for WordPress, affecting versions through 2.1.6. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to, such as deactivating user accounts.
Impact
Exploitation could lead to unauthorized deactivation of user accounts, particularly those with higher privileges.
Remediation
Users of the uxper Civi Framework plugin should update to version 2.1.6.4 or later to address this vulnerability.
Added: Jun 10, 2025, 4:22 PM
Updated: Jun 10, 2025, 4:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.4remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.