Cross-Site Request Forgery in WP SinoType Plugin for WordPress

CVE-2025-9630

What is CVE-2025-9630?

The WP SinoType plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit the sinotype_config function due to inadequate nonce validation. This weakness permits attackers to execute unauthorized actions, such as modifying typography settings, by tricking a site administrator into clicking a malicious link. It is crucial for users of the WP SinoType plugin to ensure they apply the latest updates and implement recommended security practices to mitigate the risks associated with this vulnerability.

References