Cross-Site Request Forgery in Browser Sniff Plugin for WordPress

CVE-2025-9883

What is CVE-2025-9883?

The Browser Sniff plugin for WordPress is susceptible to Cross-Site Request Forgery due to insufficient nonce validation. This vulnerability enables unauthenticated attackers to exploit the plugin, allowing them to forge requests and manipulate settings if they can deceive an administrator into inadvertently executing malicious actions, such as clicking on a deceptive link. It is crucial to take immediate action to secure your WordPress site and update to the latest version of the plugin.

References