CVE-2025-39512
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 16, 2025
CWE ID 352
Summary
CVE-2025-39512 is a Cross-Site Request Forgery (CSRF) vulnerability identified in Yuya Hoshino's Bulk Term Editor. This issue enables attackers to submit unauthorized requests on behalf of a user, potentially leading to unintended changes or actions within the editor. The affected version range is from n/a to 1.1.4. Users are strongly encouraged to update to a secure version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.