CVE-2025-47447: WordPress Cool Author Box plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak Cool Author Box allows Cross Site Request Forgery. This issue affects Cool Author Box: from n/a through 3.0.0.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Cross Site Request Forgery.This issue affects Cool Author Box: from n/a through <= 3.0.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47447?
CVE-2025-47447 has a high severity level due to its potential to allow Cross-Site Request Forgery, compromising user actions.
How do I fix CVE-2025-47447?
To fix CVE-2025-47447, users should update Hossni Mubarak Cool Author Box to version 3.0.1 or later.
What software is affected by CVE-2025-47447?
CVE-2025-47447 affects Hossni Mubarak Cool Author Box versions up to 3.0.0.
What type of vulnerability is CVE-2025-47447?
CVE-2025-47447 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
Can CVE-2025-47447 lead to data breaches?
Yes, CVE-2025-47447 can potentially lead to unauthorized actions being performed on behalf of authenticated users, which may result in data breaches.