Cross-Site Request Forgery Vulnerability in Tripetto Plugin by WordPress
CVE-2025-1530
4.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 15 March 2025
What is CVE-2025-1530?
The Tripetto plugin for WordPress is susceptible to Cross-Site Request Forgery due to inadequate nonce validation in all versions up to and including 8.0.9. This vulnerability allows unauthenticated attackers to perform unauthorized actions, such as deleting arbitrary results by tricking a site administrator into inadvertently executing a forged request.
Affected Version(s)
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto * <= 8.0.9