WordPress Virtual Moderator Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Virtual Moderator plugin, specifically in versions through 1.4. This vulnerability allows Cross-Site Scripting (XSS) attacks, as it could enable an attacker to manipulate users with higher privileges into performing actions they did not intend to.
Impact
Exploitation of this vulnerability could lead to Cross-Site Scripting (XSS) by allowing an attacker to inject malicious scripts that could be executed in the context of the user's browser.
Added: Jun 20, 2025, 3:47 PM
Updated: Jun 20, 2025, 3:47 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.