Medium · 6.5 CVE-2025-57983 EUVD-2025-30666GHSA-3543-5m7m-6c4r

WordPress BP Disable Activation Reloaded Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Published Sep 22, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: Damian Product: BP Disable Activation Reloaded

Description

Cross-Site Request Forgery (CSRF) vulnerability in Damian BP Disable Activation Reloaded bp-disable-activation-reloaded allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Disable Activation Reloaded: from n/a through <= 1.2.1.

Affected products

Vendor	Product	Affected	Fixed
Damian	BP Disable Activation Reloaded	≤ 1.2.1	—

References

https://patchstack.com/database/Wordpress/Plugin/bp-disable-activation-reloaded/vulnerability/wordpress-bp-disable-activation-reloaded-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry