Brainstormforce Import \/ Export Customizer Settings vulnerabilities

1 vulnerability

Known vulnerabilities in Brainstormforce Import \/ Export Customizer Settings, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2020-36737brainstormforceimport_\/_export_customizer_settings+1
EPSS score
0.46%
The Import / Export Customizer Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.3. This is due to missing or incorrect nonce validation on the astra_admin_errors() function. This makes it possible for unauthenticated attackers to display an import status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.