Cross-Site Request Forgery Vulnerability in Yougler Blogger Profile Page by WordPress

CVE-2025-6062

What is CVE-2025-6062?

The Yougler Blogger Profile Page plugin for WordPress contains a vulnerability that allows for Cross-Site Request Forgery (CSRF). This issue arises from inadequate nonce validation on the 'yougler-plugin.php' page, enabling unauthorized users to manipulate the plugin settings. If an attacker tricks a site administrator into clicking a malicious link, they can execute a forged request to update the plugin’s settings without proper authorization, compromising site security.

References