CVE-2025-13413

The Country Blocker for AdSense plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the CBFA_guardar_cbfa() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/browser/country-blocker-for-adsense/tags/1.0/index.php#L46
• https://plugins.trac.wordpress.org/browser/country-blocker-for-adsense/trunk/index.php#L46
• https://www.wordfence.com/threat-intel/vulnerabilities/id/134130a9-4750-4a63-88a0-60d4285acb77?source=cve

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13408The Foxtool All-in-One: Contact chat button, Custom login, M…4.3
• CVE-2025-13409The Form Vibes – Database Manager for Forms plugin for WordP…4.9
• CVE-2025-1341A vulnerability, which was classified as problematic, was fo…8.1
• CVE-2025-13410A vulnerability has been found in Campcodes Retro Basketball…9.8
• CVE-2025-13411A vulnerability was found in Campcodes Retro Basketball Shoe…9.8
• CVE-2025-13412A vulnerability was determined in Campcodes Retro Basketball…6.1
• CVE-2025-13414The Chamber Dashboard Business Directory plugin for WordPres…5.3
• CVE-2025-13415A vulnerability was identified in icret EasyImages up to 2.8…5.4
• CVE-2025-13416The ProfileGrid – User Profiles, Groups and Communities plug…4.3
• CVE-2025-13417The Plugin Organizer WordPress plugin before 10.2.4 does not…8.6
• CVE-2025-13418The Responsive Pricing Table plugin for WordPress is vulnera…6.4
• CVE-2025-13419The Guest posting / Frontend Posting / Front Editor – WP Fro…5.3