Cross-Site Request Forgery in Ultimate Tag Warrior Importer Plugin for WordPress

CVE-2025-9374

What is CVE-2025-9374?

The Ultimate Tag Warrior Importer plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF) attacks due to inadequate nonce validation. This vulnerability enables unauthenticated attackers to import tags by tricking a site administrator into executing a malicious action, such as clicking a specially crafted link. Site owners utilizing this plugin should take immediate precautions to safeguard their installations and consider applying updates or patches.

References