Medium · 4.3 CVE-2025-32281 EUVD-2025-19278GHSA-x76c-7p22-r2w3

WordPress DarkMySite plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite darkmysite allows Cross Site Request Forgery.This issue affects DarkMySite: from n/a through <= 1.2.8.

Affected products

Vendor	Product	Affected	Fixed
DarkMySite	DarkMySite	≤ 1.2.8	—

References

https://patchstack.com/database/Wordpress/Plugin/darkmysite/vulnerability/wordpress-darkmysite-advanced-dark-mode-plugin-for-wordpress-plugin-1-2-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry