CVE-2025-28909

CVE-2025-28909 describes a Cross-Site Request Forgery vulnerability in the WordPress plugin “WP No-Bot Question” (edwardw) affecting versions up to 0.1.7. Public sources (NVD/Red Hat/Patchstack) confirm the CSRF flaw but do not provide exploit details or a confirmed fixed version. CVSS 3.1 score ...