Cross-Site Request Forgery Vulnerability in ktsvetkov Product for WordPress
CVE-2025-43835

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP-cyr-cho
Vendor
CVE Published:
19 May 2025

What is CVE-2025-43835?

The ktsvetkov product has a Cross-Site Request Forgery (CSRF) vulnerability that risks unauthorized actions being initiated without user consent. This issue specifically affects the wp-cyr-cho plugin, allowing attackers to manipulate authenticated sessions, leading to potential security breaches. It is crucial for users to update their plugins to the latest versions to safeguard against such vulnerabilities. For more details, visit the reference link.

Affected Version(s)

wp-cyr-cho <= 0.1

References

https://patchstack.com/database/wordpress/plugin/wp-cyr-c...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.