CVE-2025-49351

Name of the Vulnerable Software and Affected Versions Create Posts & Terms versions prior to 1.3.2

Description A Cross-Site Request Forgery (CSRF) issue exists due to missing or incorrect nonce validation (a unique token used to prevent forged requests) on a function. This allows unauthenticated attackers to perform unauthorized actions, including Stored Cross-Site Scripting (XSS), by tricking a site administrator into clicking a malicious link.

Recommendations Update Create Posts & Terms to version 1.3.2 or later.