CVE-2025-14846

Name of the Vulnerable Software and Affected Versions The SocialChamp with WordPress plugin for WordPress versions up to and including 1.3.3

Description The plugin is susceptible to Cross-Site Request Forgery due to the absence of nonce validation in the wpsc settings tab menu function. This allows unauthenticated attackers to modify plugin settings by deceiving a site administrator into performing an action, such as clicking a malicious link.

Recommendations Update The SocialChamp with WordPress plugin to a version newer than 1.3.3.