Cross-Site Request Forgery Issue in Country Blocker for AdSense Plugin by WordPress

CVE-2025-13413

What is CVE-2025-13413?

The Country Blocker for AdSense plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF) due to inadequate nonce validation in the CBFA_guardar_cbfa() function. This weakness allows attackers to manipulate plugin settings by crafting malicious requests, assuming they can convince a site administrator to execute an action, such as clicking on a compromised link. This vulnerability highlights the need for robust security measures in WordPress plugins to prevent unauthorized actions.

References