Cross-Site Request Forgery Vulnerability in SwiftNinjaPro Developer Tools Blocker
CVE-2025-58818

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Developer Tools Blocker
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58818?

A Cross-Site Request Forgery (CSRF) vulnerability exists within the SwiftNinjaPro Developer Tools Blocker plugin. This weakness allows an attacker to send unauthorized commands to a user’s browser, potentially compromising the application’s security. Attackers can exploit this vulnerability by tricking the user into executing malicious requests without their knowledge while authenticated. It is crucial for users of versions from n/a through 3.2.1 of the Developer Tools Blocker to apply security updates and best practices to mitigate the risk.

Affected Version(s)

Developer Tools Blocker 0 <= 3.2.1

References

https://patchstack.com/database/Wordpress/Plugin/swiftnin...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.