WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

🗓️ 04 Apr 2025 13:41:19Reported by Nguyen Xuan ChienType

WordPress plugins vulnerable to Cross Site Request Forgery, fixed in version 1.1.4.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-32269	4 Apr 202516:37	–	circl
CNNVD	WordPress plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 跨站请求伪造漏洞	4 Apr 202500:00	–	cnnvd
CVE	CVE-2025-32269	4 Apr 202515:59	–	cve
Cvelist	CVE-2025-32269 WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	4 Apr 202515:59	–	cvelist
EUVD	EUVD-2025-9788	3 Oct 202520:07	–	euvd
NVD	CVE-2025-32269	4 Apr 202516:15	–	nvd
Positive Technologies	PT-2025-15023 · Unknown · Crm Perks Wp Zendesk For Contact Form 7	4 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-32269	6 Apr 202517:29	–	redhatcve
Vulnrichment	CVE-2025-32269 WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	4 Apr 202515:59	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 31, 2025 to April 6, 2025)	10 Apr 202514:38	–	wordfence