Cross-Site Request Forgery Vulnerability in Customizr Theme for WordPress

CVE-2020-36755

What is CVE-2020-36755?

The Customizr theme for WordPress is susceptible to Cross-Site Request Forgery due to inadequate nonce validation in the czr_fn_post_fields_save() function. This vulnerability allows unauthenticated attackers to exploit the system by sending crafted requests, compelling a site administrator to perform actions without their knowledge, especially if they are tricked into clicking a malicious link. This can lead to unauthorized actions being executed on behalf of the victim, potentially compromising the integrity and security of the site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References