CVE-2025-48115

UNKNOWN 0.0

WordPress ValidateCertify plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Cross-Site Request Forgery (CSRF) vulnerability in Javier Revilla ValidateCertify validar-certificados-de-cursos allows Cross Site Request Forgery.This issue affects ValidateCertify: from n/a through <= 1.6.4.

CWE	CWE-352
Vendor	javier revilla
Product	validatecertify
Published	May 16, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for javier revilla validatecertify

Be the first to know when new unknown vulnerabilities affecting javier revilla validatecertify are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Javier Revilla / ValidateCertify

0 ≤ 1.6.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/validar-certificados-de-cursos/vulnerability/wordpress-validatecertify-1-6-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Credits

ch4r0n | Patchstack Bug Bounty Program