CVE-2025-39437
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 17, 2025
CWE ID 352
Summary
CVE-2025-39437 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Boone Gorges Anthologize, a plugin used for creating and managing digital publications. This weakness enables an attacker to manipulate a user's web session and perform unauthorized actions on their behalf, including creating, updating, or deleting content. The vulnerability impacts versions of Anthologize from n/a through 0.8.3. To mitigate this risk, users should update to the latest version or apply patches provided by the vendor.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress