Cross-Site Request Forgery Vulnerability in AgreeMe Checkboxes for WooCommerce by Amin Y
CVE-2025-57905

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Agreeme Checkboxes For WooCommerce
Vendor
CVE Published:
22 September 2025

What is CVE-2025-57905?

A Cross-Site Request Forgery (CSRF) vulnerability exists in AgreeMe Checkboxes For WooCommerce, developed by Amin Y, affecting versions up to 1.1.3. This vulnerability could allow an attacker to perform actions on behalf of authenticated users without their consent, posing a significant security risk to user data and site integrity. Users are recommended to review their security measures and update to secure versions promptly.

Affected Version(s)

AgreeMe Checkboxes For WooCommerce <= 1.1.3

References

https://patchstack.com/database/wordpress/plugin/agreeme-...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
JSON
.