WordPress security by component

ValidateCertify

Plugin description

ValidateCertify is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 16, 2025; the highest CVE/CNA score is 4.3.

Plugin slug: validar-certificados-de-cursos

Latest vulnerability

CVE-2025-48115: ValidateCertify: Cross-site request forgery

ValidateCertify is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedMay 16, 2025

Safe version guidanceSee mitigation notes

		Safe version
May 16, 2025	CVE-2025-48115 ValidateCertify: Cross-site request forgery ValidateCertify is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending
Mar 27, 2025	CVE-2025-30811 ValidateCertify: Cross-site request forgery ValidateCertify is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending