Yaidier WN Flipbox Pro Cross-Site Request Forgery Vulnerability Allowing Reflected XSS
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Yaidier WN Flipbox Pro plugin for WordPress, affecting versions through 2.1. This vulnerability allows for Reflected Cross-Site Scripting (XSS) attacks. The issue arises from the plugin's insufficient protection against CSRF, which could enable attackers to trick users with higher privileges into performing actions they did not intend to.
Impact
Exploitation of this vulnerability could allow attackers to perform actions on behalf of users with higher privileges, potentially leading to unauthorized changes or disclosures.
Remediation
No official fix is available for this vulnerability. Users are advised to remove and replace the WN Flipbox Pro plugin, as it is likely abandoned and will not receive further updates or fixes.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.