CVE-2025-23797

Cross-Site Request Forgery CSRF vulnerability in Mike Selander WP Options Editor wp-options-editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through = 1.1...

CVE-2025-23797

creationtimestamp| type| source ---|---|--- 2025-01-16 21:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7bvni7o2f 2025-01-16 21:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113840234809049451 2025-01-16 21:49:22+00:00| seen|...

CVE-2025-23797 WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mike Selander WP Options Editor wp-options-editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through = 1.1...

CVE-2025-23797 WordPress WP Options Editor plugin <= 1.1 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mike Selander WP Options Editor wp-options-editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through = 1.1...

CVE-2025-23797

CVE-2025-23797 is a CSRF to privilege-escalation vulnerability affecting the WP Options Editor WordPress plugin (Mike Selander) up to version 1.1. The initial description and Red Hat advisory confirm the issue; Patchstack CVSS v3.1 base score 9.8 (critical) and exploitation context. Connected sou...