CVE-2025-9630

Name of the Vulnerable Software and Affected Versions WP SinoType plugin for WordPress versions prior to 1.1

Description The WP SinoType plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of or incorrect nonce validation in the sinotype config function. An unauthenticated attacker could potentially modify typography settings by forging a request, provided they can trick a site administrator into performing an action.

Recommendations Update the WP SinoType plugin to version 1.1 or later.