Cross-Site Request Forgery Vulnerability in Allegro Marketing Plugin for WordPress

CVE-2025-60075

What is CVE-2025-60075?

The Allegro Marketing hpb seo plugin for WordPress is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthorized actions to be performed on behalf of logged-in users. This vulnerability could potentially lead to reflected XSS attacks. It is crucial for users of the hpb seo plugin, specifically versions up to 3.0.1, to be aware of and address this security issue to protect their WordPress installations from unauthorized manipulation and exploitation.

References