CVE-2025-30531

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 352

Summary

CVE-2025-30531 represents a Cross-Site Request Forgery (CSRF) vulnerability in the GBS Developer WP Ride Booking plugin. This issue enables an attacker to induce the injured party's web browser to make unintended requests to the site, potentially leading to unauthorized actions or data modifications. Affected versions of WP Ride Booking span from the initial release through 2.4. Successful exploitation could result in significant consequences, including financial loss or data breaches. It is crucial for users to apply the necessary patches or updates to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share