vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1

  • vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1.

    Why there is no patch for this?

    The Popularis Verse theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

    No known patch available. Please review the vulnerability’s details in depth and employ mitigations based on your organization’s risk tolerance. It may be best to uninstall the affected software and find a replacement.

    I don’t want an other theme, i want this theme. So make a patch and do something!!

  • You must be logged in to reply to this topic.