Cross-Site Request Forgery Vulnerability in eLEOPARD Behance Portfolio Manager
CVE-2025-59137

7.1HIGH

Key Information:

Vendor

WordPress

Vendor
CVE Published:
31 December 2025

What is CVE-2025-59137?

The eLEOPARD Behance Portfolio Manager is affected by a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to Stored Cross-Site Scripting (XSS) attacks. Attackers exploiting this vulnerability may trick users into performing actions that could compromise their accounts or data. This issue affects all versions of eLEOPARD Behance Portfolio Manager up to and including version 1.7.5, posing significant risks to users' security. It is crucial to implement protective measures to mitigate these vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Behance Portfolio Manager <= 1.7.5

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Nur Ibnu Hubab | Patchstack Bug Bounty Program
.