Cross-Site Request Forgery Vulnerability in Simple Page Access Restriction by WordPress
CVE-2025-58202

4.3MEDIUM

Key Information:

Vendor: WordPress
Status: Simple Page Access Restriction
Vendor: CVE Published:; 27 August 2025

What is CVE-2025-58202?

The Simple Page Access Restriction plugin for WordPress is impacted by a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows attackers to trick authenticated users into submitting unwanted actions, potentially granting unauthorized access. Users of versions up to 1.0.32 should take immediate action to safeguard their installations against exploitation.

Affected Version(s)

Simple Page Access Restriction <= 1.0.32

References

https://patchstack.com/database/wordpress/plugin/simple-p...

vdb-entry

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Aug 27, 2025
Vulnerability Reserved
Aug 27, 2025

Credit

Nguyen Xuan Chien (Patchstack Alliance)

JSON