← Back

Coolrunner

coolrunner

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Homerunner
homerunner
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-5932
1Coolrunner
1Homerunner
Apr 8, 2026
Jun 26, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.30. This is due to missing or incorrect nonce validation on the main_settings() function. This mak...Show more
The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.30. This is due to missing or incorrect nonce validation on the main_settings() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.Show less