CSRF Vulnerability in ElbowRobo Read More Copy Link Plugin
CVE-2025-25148

7.1HIGH

Key Information:

Vendor: WordPress
Status: Read More Copy Link
Vendor: CVE Published:; 7 February 2025

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ElbowRobo Read More Copy Link plugin, allowing attackers to manipulate user actions without consent. This flaw can result in Stored Cross-Site Scripting (XSS), posing significant risks to affected users. Proper mitigation strategies, including updates and security best practices, are essential for safeguarding against this vulnerability in versions earlier than 1.0.2.

Affected Version(s)

References

https://patchstack.com/database/wordpress/plugin/read-mor...

vdb-entry

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Feb 7, 2025
Vulnerability Reserved
Feb 3, 2025

Credit

Abdi Pranata (Patchstack Alliance)