CSRF Vulnerability in Advanced Post List by jokerbr313

CVE-2025-30968

What is CVE-2025-30968?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Advanced Post List plugin by jokerbr313, impacting versions from n/a up to 0.5.6.2. This flaw allows malicious actors to execute unauthorized actions on behalf of an authenticated user. If exploited, the vulnerability could lead to significant security breaches, as it allows attackers to trick users into performing actions they did not intend. It is crucial for users and administrators of the affected plugin to implement necessary security measures to mitigate potential risks.

References