Cross-Site Request Forgery Vulnerability in Web Accessibility By accessiBe Plugin for WordPress

CVE-2025-10375

What is CVE-2025-10375?

The Web Accessibility By accessiBe plugin for WordPress is affected by a Cross-Site Request Forgery vulnerability due to the absence of nonce validation on several AJAX actions. This issue allows unauthenticated attackers to potentially manipulate plugin settings or create verification files by deceiving a site administrator into executing specific actions, such as clicking a malicious link. This vulnerability impacts all versions of the plugin up to and including version 2.10, exposing WordPress sites relying on this plugin to unauthorized modifications.

References