CVE-2025-39426
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 17, 2025
CWE ID 352
Summary
CVE-2025-39426 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the illow – Cookies Consent plugin. This issue allows attackers to manipulate user actions on a targeted website, potentially leading to unintended or malicious actions. The vulnerability exists in illow – Cookies Consent versions from undisclosed to 0.2.0. Users of these versions are advised to upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress