Cross-Site Request Forgery Vulnerability in Opinion Stage WordPress Plugin

CVE-2025-13143

What is CVE-2025-13143?

The Poll, Survey & Quiz Maker Plugin from Opinion Stage for WordPress is susceptible to Cross-Site Request Forgery due to inadequate nonce validation in the disconnect_account_action function. This vulnerability allows attackers to exploit the trust of authenticated users by tricking them into performing unintended actions, such as disconnecting their WordPress site from the Opinion Stage platform, by utilizing forged requests. It is imperative for site administrators to be aware of this security flaw and take necessary precautions to safeguard their sites from potential unauthorized changes.

References