Medium · 5.4 CVE-2025-68082 EUVD-2025-203537GHSA-x92w-9xj8-2283

WordPress Semrush Content Toolkit plugin <= 1.1.32 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: SEMrush CY Product: Semrush Content Toolkit

Description

Cross-Site Request Forgery (CSRF) vulnerability in SEMrush CY LTD Semrush Content Toolkit semrush-contentshake allows Cross Site Request Forgery.This issue affects Semrush Content Toolkit: from n/a through <= 1.1.32.

Affected products

Vendor	Product	Affected	Fixed
SEMrush CY	Semrush Content Toolkit	≤ 1.1.32	—

References

https://patchstack.com/database/Wordpress/Plugin/semrush-contentshake/vulnerability/wordpress-semrush-content-toolkit-plugin-1-1-32-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry