Cross-Site Request Forgery in osTicket WP Bridge Plugin for WordPress

CVE-2025-9882

What is CVE-2025-9882?

The osTicket WP Bridge plugin for WordPress has a vulnerability that allows unauthenticated adversaries to exploit missing or incorrect nonce validation. This weakness enables malicious users to perform unauthorized actions by tricking site administrators into clicking on harmful links, potentially allowing attackers to update configuration settings or inject malicious scripts into the website. It is crucial for all users of the affected versions to apply security measures and consider updates to safeguard their sites.

References