WordPress Munk Sites plugin <= 1.0.7 - CSRF zu willkürlicher Plugin-Installation Schwachstelle

The CSRF vulnerability allows an attacker to trick a legitimate user into unknowingly executing malicious actions within the Munk Sites plugin. This could involve modifying site settings, creating or deleting content, or performing other administrative tasks as if they were initiated by the user. Successful exploitation could lead to unauthorized modifications to the website's functionality and data integrity. The potential impact is significant, as attackers can leverage this vulnerability to compromise the entire WordPress site if users are tricked into clicking malicious links.

Websites using the MetricThemes Munk Sites plugin, particularly those with administrative access or sensitive data, are at risk. Shared hosting environments where multiple websites share the same server resources are also at increased risk, as a compromise of one site could potentially lead to the compromise of others.

• wordpress / composer / npm:

grep -r 'munk-sites/includes/class-munk-sites-admin.php' . |
 grep -i 'wp_send_json'

• generic web:

curl -I https://example.com/munk-sites/admin/ | grep -i 'csrf-token'

1. 2025-02-07Disclosure

   disclosure

1. Reserviert2025-02-03
2. Veröffentlicht2025-02-07
3. Geändert2026-04-28
4. EPSS aktualisiert2026-04-02

The primary mitigation is to upgrade the Munk Sites plugin to version 1.0.8 or later, which contains the fix for this vulnerability. If immediate upgrading is not possible, consider implementing temporary workarounds such as adding CSRF tokens to all sensitive forms within the plugin. Web Application Firewalls (WAFs) can also be configured to filter out malicious requests targeting the vulnerable endpoints. Regularly review WordPress plugin security best practices to minimize the risk of future CSRF attacks.