Cross-Site Request Forgery Vulnerability in Advanced Search by My Solr Server for WordPress

CVE-2025-3099

What is CVE-2025-3099?

The Advanced Search by My Solr Server plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability that affects all versions up to and including 2.0.5. This issue arises from inadequate nonce validation on the 'MySolrServerSettings' page. As a result, unauthorized actors can exploit this flaw to manipulate configurations and potentially introduce malicious scripts by deceiving a site administrator into executing a crafted request. It is essential for administrators to be alert to this vulnerability and take necessary precautions.

References