Cross-Site Request Forgery Vulnerability in WP Blast SEO & Performance Booster Plugin

CVE-2025-9622

What is CVE-2025-9622?

The WP Blast | SEO & Performance Booster plugin for WordPress exhibits a security flaw due to insufficient nonce validation across multiple administrative actions in the Settings class. This vulnerability permits unauthenticated attackers to exploit forged requests, enabling them to manipulate critical plugin functions like cache purging, sitemap clearing, data purging, and score resets by tricking an authorized site administrator into executing certain actions, such as clicking on a malicious link.

References