CVE-2025-24714

Summary

CVE-2025-24714 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Bubble Menu – circle floating menu version 4.0.2 and prior. An attacker can exploit this issue by tricking a user into performing an unwanted action on the targeted website. The CSRF attack is initiated when the attacker induces the victim to unknowingly make a request to the vulnerable website, leading to potential data manipulation or unauthorized actions. This poses a significant risk to users of the affected menu, as they may inadvertently make requests on behalf of the attacker. It is essential to update the Bubble Menu – circle floating menu to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.