CSRF Vulnerability in WP Options Editor by Mike Selander

CVE-2025-23797

What is CVE-2025-23797?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WP Options Editor plugin developed by Mike Selander, which could allow an attacker to perform unauthorized actions on behalf of an authenticated user. This vulnerability impacts versions from n/a through 1.1, potentially leading to privilege escalation if exploited. It is crucial for users of this plugin to apply necessary patches and updates to mitigate the risk involved. For more technical details, refer to the relevant security databases.

References