CVE-2025-1530

The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.0.9. This is due to missing nonce validation. This makes it possible for unauthenticated attackers to delete arbitrary results via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/browser/tripetto/trunk/lib/capabilities.phpProduct
• https://plugins.trac.wordpress.org/changeset/3251202/Patch
• https://plugins.trac.wordpress.org/changeset/3251202/tripetto/trunk/admin/results/list.phpProduct
• https://plugins.trac.wordpress.org/changeset/3251202/tripetto/trunk/admin/results/results.phpPatch
• https://wordpress.org/plugins/tripetto/#developersProduct
• https://www.wordfence.com/threat-intel/vulnerabilities/id/dd80abd9-3f41-414a-a781-9bff7d85ec4b?source=cveThird Party Advisory

Published

Mar 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15283The Name Directory plugin for WordPress is vulnerable to Sto…7.2
• CVE-2025-15284Improper Input Validation vulnerability in qs (parse modules…6.3
• CVE-2025-15285The SEO Flow by LupsOnline plugin for WordPress is vulnerabl…7.5
• CVE-2025-15288Tanium addressed an improper access controls vulnerability i…4.3
• CVE-2025-15289Tanium addressed an improper access controls vulnerability i…3.1
• CVE-2025-1529The AM LottiePlayer plugin for WordPress is vulnerable to St…6.4
• CVE-2025-1531Authentication credentials leakage vulnerability in Hitachi…6.5
• CVE-2025-15310Tanium addressed a local privilege escalation vulnerability …7.8
• CVE-2025-15311Tanium addressed an unauthorized code execution vulnerabilit…7.8
• CVE-2025-15312Tanium addressed an improper output sanitization vulnerabili…7.2
• CVE-2025-15313Tanium addressed an arbitrary file deletion vulnerability in…7.1
• CVE-2025-15314Tanium addressed an arbitrary file deletion vulnerability in…8.1