PT-2025-10931
CVE-2025-28887
·
Published
2025-03-11
·
Updated
2025-03-12
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Fastmover Plugins Last Updated Column versions 0.1.3 and earlier
Description:
The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows unauthorized actions to be performed on behalf of a user. This is due to inadequate protection against CSRF attacks in the affected plugin.
Recommendations:
For Fastmover Plugins Last Updated Column versions 0.1.3 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾