CVE-2025-26925

Summary

CVE-2025-26925 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Admin Menu Manager, specifically versions from n/a through 1.0.3. An attacker can exploit this weakness by tricking a user into making unwanted changes to their account or data on the affected website. The CSRF attack occurs when an attacker deceives the user into clicking a malicious link, leading to unintended actions being executed under the user's privileges. This vulnerability poses a significant threat to websites using the Admin Menu Manager and highlights the importance of keeping software up-to-date to mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.