Cross-Site Request Forgery in Rootspersona by ed4becky
CVE-2025-48344

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Rootspersona
Vendor
CVE Published:
19 May 2025

What is CVE-2025-48344?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Rootspersona plugin by ed4becky, potentially allowing unauthorized actions to be performed on behalf of authenticated users. The vulnerability affects all versions prior to and including 3.7.5, enabling attackers to exploit the trust a user has in the website. This exploit could lead to unauthorized data manipulation and other harmful actions without the user's knowledge.

Affected Version(s)

Rootspersona <= 3.7.5

References

https://patchstack.com/database/wordpress/plugin/rootsper...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

domiee13 (Patchstack Alliance)
.