Medium · 4.3 CVE-2025-43835 EUVD-2025-28016GHSA-7f8x-9x27-qrmg

WordPress wp-cyr-cho plugin <= 0.1 - Cross Site Request Forgery (CSRF) vulnerability

Published May 19, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in ktsvetkov wp-cyr-cho wp-cyr-cho allows Cross Site Request Forgery.This issue affects wp-cyr-cho: from n/a through <= 0.1.

Affected products

Vendor	Product	Affected	Fixed
ktsvetkov	wp-cyr-cho	≤ 0.1	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-cyr-cho/vulnerability/wordpress-wp-cyr-cho-plugin-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry