CVE-2025-12173

Name of the Vulnerable Software and Affected Versions WP Admin Microblog plugin for WordPress versions prior to 3.1.2

Description The WP Admin Microblog plugin for WordPress is susceptible to Cross-Site Request Forgery (CSRF). This is caused by a lack of, or incorrect, nonce validation on the 'wp-admin-microblog' page. An unauthenticated attacker could potentially send messages as an administrator if they can trick an administrator into performing an action, such as clicking a malicious link.

Recommendations Update the WP Admin Microblog plugin to version 3.1.2 or later.