CVE-2025-12879 - User Generator and Importer <= 1.2.2 - cross-site request forgery to privilege e...

CVE-2025-12879 - User Generator and Importer <= 1.2.2 - cross-site request forgery to privilege e...

CVE ID : CVE-2025-12879 Published : Dec. 5, 2025, 10:15 a.m. | 2 hours, 46 minutes ago Description : The User Generator and Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2. This is due to missing nonce validation in the

CVE Details

Published
Dec. 5, 2025
Affected Product: WordPress

Source: Telegram CVE Monitor