CSRF Vulnerability in BestWebSoft Htaccess Plugin for WordPress
CVE-2020-8658

8.8HIGH

Key Information:

Vendor: Wordpress
Status: Htaccess
Vendor: CVE Published:; 6 February 2020

What is CVE-2020-8658?

The BestWebSoft Htaccess plugin version 1.8.1 for WordPress suffers from a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to manipulate the .htaccess file of a WordPress site without proper nonce validation. By directing users to a malicious web page, attackers can exploit this vulnerability to gain control over the website, making it imperative for users to ensure that they keep their plugins updated and implement robust website security measures.