Medium · 5.4 CVE-2025-31439 EUVD-2025-8610GHSA-66cx-46h2-jv42

WordPress Browser Caching with .htaccess 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Published Mar 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: tobias_.MerZ Product: Browser Caching with .htaccess

Description

Cross-Site Request Forgery (CSRF) vulnerability in tobias_.MerZ Browser Caching with .htaccess allows Cross Site Request Forgery. This issue affects Browser Caching with .htaccess: from 1.2.1 through n/a.

Affected products

Vendor	Product	Affected	Fixed
tobias_.MerZ	Browser Caching with .htaccess	1.2.1	—

References

https://patchstack.com/database/wordpress/plugin/browser-caching-with-htaccess/vulnerability/wordpress-browser-caching-with-htaccess-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry