Cross-Site Request Forgery Vulnerability in Ads Pro Plugin for WordPress
CVE-2025-6459
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 2 July 2025
What is CVE-2025-6459?
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager is susceptible to Cross-Site Request Forgery, stemming from inadequate or missing nonce validation in the bsaCreateAdTemplate function. This vulnerability allows unauthenticated attackers to execute arbitrary PHP code by tricking site administrators into making requests that could compromise the site's integrity.
Affected Version(s)
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager * <= 4.89