Volerion logoVolerion
Volerion logoVolerion

WP Promoter WordPress Plugin Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WP Promoter plugin for WordPress, affecting all versions through 1.3. The issue arises from inadequate nonce validation, allowing unauthenticated attackers to manipulate settings and inject harmful scripts by tricking an administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings and the injection of malicious scripts, which could be executed in the context of the user.

Added: May 27, 2026, 8:21 AM
Updated: May 27, 2026, 8:21 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.9
exploitability
6.9
remediation
0.0
relevance
9.3
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.