Cross-Site Request Forgery Vulnerability in Advanced Search by My Solr Server for WordPress

CVE-2025-3099

What is CVE-2025-3099?

The Advanced Search by My Solr Server plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability that affects all versions up to and including 2.0.5. This issue arises from inadequate nonce validation on the 'MySolrServerSettings' page. As a result, unauthorized actors can exploit this flaw to manipulate configurations and potentially introduce malicious scripts by deceiving a site administrator into executing a crafted request. It is essential for administrators to be alert to this vulnerability and take necessary precautions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References