Cross-Site Request Forgery in Project Honey Pot Spam Trap Plugin for WordPress

CVE-2025-12406

What is CVE-2025-12406?

The Project Honey Pot Spam Trap plugin for WordPress is affected by a Cross-Site Request Forgery vulnerability due to inadequate nonce validation in the printAdminPage() function. This flaw allows unauthenticated attackers to potentially alter settings or inject malicious scripts if they can trick an administrative user into executing a crafted request. As a result, users of versions up to and including 1.0.1 are at risk and should consider immediate remediation steps to protect their sites.

References