EUVD-2025-30307

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

osTicket WordPress Bridge plugin has Cross Site Forgery flaw through version 1.9.2 enabling unauthorized updates.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-9882	20 Sep 202511:15	–	circl
CNNVD	WordPress plugin osTicket WP Bridge 跨站请求伪造漏洞	20 Sep 202500:00	–	cnnvd
CVE	CVE-2025-9882	20 Sep 202506:43	–	cve
Cvelist	CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting	20 Sep 202506:43	–	cvelist
NVD	CVE-2025-9882	20 Sep 202507:15	–	nvd
Patchstack	WordPress osTicket WP Bridge plugin <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability	20 Sep 202500:41	–	patchstack
Positive Technologies	PT-2025-38634	20 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9882	22 Sep 202507:33	–	redhatcve
Vulnrichment	CVE-2025-9882 osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting	20 Sep 202506:43	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 15, 2025 to September 21, 2025)	25 Sep 202514:54	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "66e1f378-41d3-349c-9997-8fef80022af3",
        "vendor": {
          "name": "michaelbo"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f40d0ea7-023c-39be-8134-225e9be58f94",
        "product": {
          "name": "osTicket WP Bridge"
        },
        "product_version": "* ≤1.9.2"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/88e508ad-e7dd-4c8f-a44d-ef633e826007
wordpress	www.wordpress.org/plugins/osticket-wp-bridge/
plugins	www.plugins.trac.wordpress.org/browser/osticket-wp-bridge/tags/1.9.2/admin/ost-config.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-9882

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1

EPSS0.00014

SSVC