Cross-Site Request Forgery Vulnerability in Sanjeev Mohindra Author Box Plugin
CVE-2025-39371

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Author Box Plugin With Different Description
Vendor
CVE Published:
19 May 2025

What is CVE-2025-39371?

A Cross-Site Request Forgery (CSRF) vulnerability in the Author Box Plugin With Different Description enables attackers to perform unauthorized actions on behalf of authenticated users. This risk could lead to malicious activities such as changing settings or conducting transactions without user consent, making it crucial for website owners to update to secure versions and implement additional security measures.

Affected Version(s)

Author Box Plugin With Different Description 0 <= 1.3.5

References

https://patchstack.com/database/Wordpress/Plugin/author-b...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

johska (Patchstack Alliance)
.