CVE-2025-28910

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Mar 11, 2025
CWE ID 352

Summary

CVE-2025-28910 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WP Hide Admin Bar, a WordPress plugin. This issue permits an attacker to craft malicious requests that can be executed on behalf of a vulnerable user, potentially leading to unauthorized actions within the plugin. The vulnerability exists in WP Hide Admin Bar versions from n/a through 2.0, and users are advised to update to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • WP Hide Admin Bar Plugin

Affected Vendors

  • WordPress

Advisories, Assessments, and Mitigations