Cross-Site Request Forgery Exposure in Auto Prune Posts by Ramon Fincken
CVE-2025-64262
Currently unrated
What is CVE-2025-64262?
The Auto Prune Posts plugin developed by Ramon Fincken is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This security issue allows unauthorized commands to be transmitted from a user that the web application trusts. Attackers could exploit this weakness in versions up to 3.0.0 to perform actions on behalf of unsuspecting users, potentially leading to unintended changes in post management on WordPress sites. To safeguard against such threats, users are advised to update to a fixed version and implement additional security measures.
Affected Version(s)
Auto Prune Posts <= n/a