Cross-Site Request Forgery in ARK Related Posts Plugin for WordPress

CVE-2025-13684

What is CVE-2025-13684?

The ARK Related Posts plugin for WordPress contains a Cross-Site Request Forgery vulnerability due to insufficient nonce validation in the ark_rp_options_page function. This flaw allows attackers to send unauthorized requests that can alter the plugin's configuration settings if they manage to persuade a site administrator to interact with a malicious link. Proper nonce verification is crucial for protecting against such attacks and ensuring the integrity of the site's settings.

References