Cross-Site Request Forgery Vulnerability in Posts Navigation Links Plugin by WP Masters

CVE-2025-12188

What is CVE-2025-12188?

The Posts Navigation Links for Sections and Headings – Free plugin by WP Masters contains a vulnerability that allows unauthenticated attackers to exploit missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page. This vulnerability permits attackers to alter the plugin’s settings by tricking a site administrator into clicking on a malicious link, leading to potential unauthorized changes to a WordPress site’s configuration and compromising its integrity.

References