High · 8.8 CVE-2025-59572 EUVD-2025-30477GHSA-x3gp-5h32-c453

WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: purethemes Product: WorkScout-Core

Description

Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Cross Site Request Forgery.This issue affects WorkScout-Core: from n/a through < 1.7.06.

Affected products

Vendor	Product	Affected	Fixed
purethemes	WorkScout-Core	≤ 1.7.06	—

References

https://patchstack.com/database/Wordpress/Plugin/workscout-core/vulnerability/wordpress-workscout-core-plugin-1-7-06-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry