CVE-2025-25101

Summary

CVE-2025-25101 is a Cross-Site Request Forgery (CSRF) vulnerability affecting MetricThemes Munk Sites. Versions from n/a to 1.0.7 are impacted by this issue. An attacker can exploit this flaw to perform unauthorized actions on behalf of a victim, by tricking them into making requests to vulnerable endpoints. This CSRF vulnerability poses a significant risk, enabling attackers to modify user data or perform other malicious activities on the affected site. Users are strongly advised to update to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.