CVE-2025-46462

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Apr 24, 2025
Updated: Apr 29, 2025
CWE ID 352

Summary

CVE-2025-46462 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WPVN plugin for WordPress. This issue enables an attacker to submit malicious requests on behalf of a user after they have initiated legitimate actions on the affected site, potentially leading to unauthorized modifications or data leaks. The vulnerability impacts WPVN from all versions up to and including 0.7.8. Users are strongly advised to update to the latest version or to apply the recommended patch to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share