SR WP Minify HTML WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the SR WP Minify HTML plugin for WordPress, affecting all versions through 2.1. The vulnerability arises from a lack of nonce validation in the sr_minify_html_theme() function, allowing unauthenticated attackers to manipulate plugin settings by tricking a site administrator into clicking a link.
Impact
Exploitation of this vulnerability allows for unauthorized changes to be made to the plugin's settings, potentially leading to unintended behavior on the website.
Added: Mar 21, 2026, 4:48 AM
Updated: Mar 21, 2026, 4:48 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.9remediation
0.0relevance
4.2threat
3.2urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.