CVE-2025-4199

The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02. This is due to missing or incorrect nonce validation on the 'abundatrade' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/browser/abundatrade-plugin/tags/1.8.02/abundatrade_pugin.php
• https://wordpress.org/plugins/abundatrade-plugin/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ef828667-f241-4c5c-92a8-0a4f366e190f?source=cve

Published

May 3, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4193A vulnerability was found in itsourcecode Restaurant Managem…9.8
• CVE-2025-4194The AlT Monitoring plugin for WordPress is vulnerable to Cro…6.1
• CVE-2025-4195A vulnerability was found in itsourcecode Gym Management Sys…9.8
• CVE-2025-4196A vulnerability was found in SourceCodester Patient Record M…8.8
• CVE-2025-4197A vulnerability classified as critical has been found in cod…8.8
• CVE-2025-4198The Alink Tap plugin for WordPress is vulnerable to Cross-Si…6.1
• CVE-2025-4200The Zagg - Electronics & Accessories WooCommerce WordPress T…8.1
• CVE-2025-4202The Multicollab: Content Team Collaboration and Editorial Wo…4.3
• CVE-2025-4203The wpForo Forum plugin for WordPress is vulnerable to error…7.5
• CVE-2025-4204The Ultimate Auction Pro plugin for WordPress is vulnerable …7.5
• CVE-2025-4205The Popup Maker plugin for WordPress is vulnerable to Stored…6.4
• CVE-2025-4206The WordPress CRM, Email & Marketing Automation for WordPres…7.2