CVE-2025-28881

Summary

CVE-2025-28881 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the mg12 Mobile Themes from an unknown version up to 1.1.1. This issue allows malicious actors to execute unintended actions on a user's session, potentially leading to data manipulation or unauthorized access. A successful attack requires the attacker to lure the victim to a specially crafted website, which then sends a malicious request to the victim's web application on their behalf. Users are advised to apply the necessary patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.