Cross-Site Request Forgery Vulnerability in WP Blast SEO & Performance Booster Plugin

CVE-2025-9622

What is CVE-2025-9622?

The WP Blast | SEO & Performance Booster plugin for WordPress exhibits a security flaw due to insufficient nonce validation across multiple administrative actions in the Settings class. This vulnerability permits unauthenticated attackers to exploit forged requests, enabling them to manipulate critical plugin functions like cache purging, sitemap clearing, data purging, and score resets by tricking an authorized site administrator into executing certain actions, such as clicking on a malicious link.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References