EUVD-2025-30306

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Browser Sniff WordPress plugin up to 2.3 has cross site forgery from missing nonce validation, enabling unauthenticated attackers to update settings and inject scripts.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-9883	20 Sep 202511:39	–	circl
CNNVD	WordPress plugin Browser Sniff 跨站请求伪造漏洞	20 Sep 202500:00	–	cnnvd
CVE	CVE-2025-9883	20 Sep 202506:43	–	cve
Cvelist	CVE-2025-9883 Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting	20 Sep 202506:43	–	cvelist
NVD	CVE-2025-9883	20 Sep 202507:15	–	nvd
Patchstack	WordPress Browser Sniff plugin <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability	20 Sep 202500:10	–	patchstack
Positive Technologies	PT-2025-38635	20 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9883	22 Sep 202507:33	–	redhatcve
Vulnrichment	CVE-2025-9883 Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting	20 Sep 202506:43	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 15, 2025 to September 21, 2025)	25 Sep 202514:54	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "c3a8b507-9047-3ad5-b5cd-add7fbd974cf",
        "vendor": {
          "name": "bpedrassani"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "933e918f-942d-3f0d-b512-92f2323784ad",
        "product": {
          "name": "Browser Sniff"
        },
        "product_version": "* ≤2.3"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b7210fd7-0812-47bc-bc62-d69280253e0a
wordpress	www.wordpress.org/plugins/browser-sniff/
plugins	www.plugins.trac.wordpress.org/browser/browser-sniff/tags/2.3/browsersniff.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-9883

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1

EPSS0.00023

SSVC