Medium · 4.3 CVE-2025-31602 EUVD-2025-8804GHSA-3gqf-jg6j-f9gc

WordPress Apimo Connector plugin <= 2.6.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 31, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Proptech Plugin Product: Apimo Connector

Description

Cross-Site Request Forgery (CSRF) vulnerability in Proptech Plugin Apimo Connector apimo allows Cross Site Request Forgery.This issue affects Apimo Connector: from n/a through <= 2.6.5.1.

Affected products

Vendor	Product	Affected	Fixed
Proptech Plugin	Apimo Connector	≤ 2.6.5.1	—

References

https://patchstack.com/database/Wordpress/Plugin/apimo/vulnerability/wordpress-apimo-connector-plugin-2-6-3-1-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve vdb-entry