Cross-Site Request Forgery in Banner Effect Header for WordPress
CVE-2015-0920

Currently unrated

Key Information:

Vendor: Wordpress
Status: Banner Effect Header
Vendor: CVE Published:; 8 January 2015

What is CVE-2015-0920?

A CSRF vulnerability exists in the Banner Effect Header plugin version 1.2.6 for WordPress, enabling remote attackers to exploit the plugin by hijacking the authentication of administrators. This can be achieved through crafted requests that utilize the 'banner_effect_email' parameter on the BannerEffectOptions page, potentially leading to cross-site scripting (XSS) attacks and compromising the site's security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch