CVE-2025-1362

easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks

Affected

URL Shortener | Conversion Tracking | AB Testing | WooCommerce

CVSS v3.1 CNA

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

EPSS

0.17% chance of exploitation in the next 30 days, 6th percentile

Published

2025-03-09

Updated

2025-03-11

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/035cc502-a514-440f-8808-5655c8c915e2/

Security advisories

• https://wpscan.com/vulnerability/035cc502-a514-440f-8808-5655c8c915e2

References

• CVE Record
• NVD entry