Cross-Site Request Forgery in Project Honey Pot Spam Trap Plugin for WordPress

CVE-2025-12406

What is CVE-2025-12406?

The Project Honey Pot Spam Trap plugin for WordPress is affected by a Cross-Site Request Forgery vulnerability due to inadequate nonce validation in the printAdminPage() function. This flaw allows unauthenticated attackers to potentially alter settings or inject malicious scripts if they can trick an administrative user into executing a crafted request. As a result, users of versions up to and including 1.0.1 are at risk and should consider immediate remediation steps to protect their sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References