Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-32261 EUVD-2025-9787GHSA-8xvw-2mvx-v2mv

WordPress Advanced All in One Admin Search by WP Spotlight plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Published Apr 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through <= 1.1.1.

Affected products

VendorProductAffectedFixed
Kuppuraj Advanced All in One Admin Search by WP Spotlight ≤ 1.1.1 —

References