Beveiligingsadvies

CVE-2025-8606

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-11 09:28:41

Laatst bijgewerkt 2026-04-08 17:26:12

Toegewezen door Wordfence

CVSS-score 2.4

Status PUBLISHED

Beschrijving

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This makes it possible for attackers to trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clicking on a malicious link or visiting a compromised page.

← Alle CVE's bekijken Bekijk op cve.org ↗