CVE-2025-30833
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 352
Summary
CVE-2025-30833 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Soft8Soft LLC's Verge3D software. The flaw enables an attacker to submit unauthorized requests on behalf of a user, potentially leading to data manipulation or unauthorized actions. This vulnerability can be exploited by tricking a user into visiting a malicious website or clicking on a specially crafted link. The issue affects Verge3D versions from n/a through 4.8.2. Users are advised to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress