Cross-Site Request Forgery Vulnerability in Mihdan Plugin by WordPress
CVE-2025-53451

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Mihdan: No External Links
Vendor
CVE Published:
22 September 2025

What is CVE-2025-53451?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Mihdan: No External Links plugin. This issue can allow an attacker to perform unauthorized actions on behalf of a user without their consent. The vulnerability affects versions from n/a up to 5.1.4, potentially exploiting the trust between the browser and the targeted website to manipulate user actions. It is crucial for website administrators to review and apply security measures to protect against this type of attack to safeguard their users and data.

Affected Version(s)

Mihdan: No External Links <= 5.1.4

References

https://patchstack.com/database/wordpress/plugin/mihdan-n...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bao - BlueRock (Patchstack Alliance)
.