Validar Certificados De Cursos Vulnerabilities

The ValidateCertify Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.6.4

Fixed in:

1.6.5

Disclosed:

May 16, 2025

CVE-2025-48115 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Javier Revilla ValidateCertify allows Cross Site Request Forgery. This issue affects ValidateCertify: from n/a through 1.6.2.

Affected:

up to 1.6.2

Fix:

No patched version reported

Disclosed:

May 16, 2025

CVE-2025-48115 on NVD →

The ValidateCertify Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.6.1

Fixed in:

1.6.2

Disclosed:

Mar 27, 2025

CVE-2025-30811 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Javier Revilla ValidateCertify allows Cross Site Request Forgery. This issue affects ValidateCertify: from n/a through 1.6.1.

Affected:

up to 1.6.2

Fixed in:

1.6.2

Disclosed:

Mar 27, 2025

CVE-2025-30811 on NVD →