Medium · 4.7 CVE-2025-48099 EUVD-2025-35561GHSA-2r8h-2rq3-qxmx

WordPress Search & Filter plugin <= 1.2.17 - Cross Site Request Forgery (CSRF) to Open Redirect vulnerability

Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Code Amp Product: Search & Filter

Description

Cross-Site Request Forgery (CSRF) vulnerability in Code Amp Search & Filter search-filter allows Cross Site Request Forgery.This issue affects Search & Filter: from n/a through <= 1.2.17.

Affected products

Vendor	Product	Affected	Fixed
Code Amp	Search & Filter	≤ 1.2.17	—

References

https://patchstack.com/database/Wordpress/Plugin/search-filter/vulnerability/wordpress-search-filter-plugin-1-2-17-cross-site-request-forgery-csrf-to-open-redirect-vulnerability?_s_id=cve vdb-entry