Cross-Site Request Forgery Vulnerability in Side Slide Responsive Menu for WordPress
CVE-2025-9880

6.1MEDIUM

Key Information:

Vendor

WordPress

Vendor
CVE Published:
12 September 2025

What is CVE-2025-9880?

The Side Slide Responsive Menu plugin for WordPress allows unauthenticated attackers to exploit Cross-Site Request Forgery vulnerabilities due to inadequate nonce validation. This can enable attackers to manipulate settings and inject harmful scripts if they manage to deceive a site administrator into executing a malicious action, such as clicking a deceptive link. It is crucial for users to ensure they are using the latest version to mitigate these risks.

Affected Version(s)

Side Slide Responsive Menu * <= 1.0

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

JohSka
.
CVE-2025-9880 : Cross-Site Request Forgery Vulnerability in Side Slide Responsive Menu for WordPress