CVE-2025-30531
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2025-30531 represents a Cross-Site Request Forgery (CSRF) vulnerability in the GBS Developer WP Ride Booking plugin. This issue enables an attacker to induce the injured party's web browser to make unintended requests to the site, potentially leading to unauthorized actions or data modifications. Affected versions of WP Ride Booking span from the initial release through 2.4. Successful exploitation could result in significant consequences, including financial loss or data breaches. It is crucial for users to apply the necessary patches or updates to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress