Cross-Site Request Forgery Vulnerability in AuthorSure Plugin by WordPress

CVE-2025-13134

What is CVE-2025-13134?

The AuthorSure plugin for WordPress contains a vulnerability that allows unauthenticated attackers to exploit insufficient nonce validation on the 'authorsure' page. By leveraging Cross-Site Request Forgery (CSRF) techniques, attackers can forge requests that may lead to unauthorized adjustments to plugin settings or the injection of malicious scripts. This exploitation is facilitated by tricking site administrators into executing actions, such as clicking on a malicious link.

References