Cross-Site Request Forgery Vulnerability in Affiliates Manager by Affiliates Manager Google reCAPTCHA Integration
CVE-2025-48233

7.1HIGH

Key Information:

Vendor

WordPress
Status
Affiliates Manager Google Recaptcha Integration
Vendor
CVE Published:
19 May 2025

What is CVE-2025-48233?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Affiliates Manager Google reCAPTCHA Integration plugin that can lead to Stored Cross-Site Scripting (XSS) attacks. This flaw affects versions up to 1.0.6, enabling malicious actors to exploit the vulnerability by tricking users into executing unintended actions. Proper input validation and authentication measures are essential to mitigate risks associated with this vulnerability.

Affected Version(s)

Affiliates Manager Google reCAPTCHA Integration <= 1.0.6

References

https://patchstack.com/database/wordpress/plugin/affiliat...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

johska (Patchstack Alliance)
.