CVE-2025-14903

Name of the Vulnerable Software and Affected Versions Simple Crypto Shortcodes versions up to and including 1.0.2

Description The Simple Crypto Shortcodes plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of nonce validation in the scs backend function. An unauthenticated attacker could potentially update plugin settings by forging a request, provided they can trick a site administrator into performing an action.

Recommendations Update Simple Crypto Shortcodes to a version newer than 1.0.2.