{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12188", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-24T19:57:28.785Z", "datePublished": "2025-11-04T04:27:12.323Z", "dateUpdated": "2026-04-08T16:33:33.004Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:33.004Z"}, "affected": [{"vendor": "wpmasterscom", "product": "Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.0.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "title": "Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/05f73a26-f637-4a1a-9f8c-98be8a146f00?source=cve"}, {"url": "https://wordpress.org/plugins/posts-navigation-links-for-sections-and-headings-free-by-wp-masters/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "dayea song"}], "timeline": [{"time": "2025-11-03T15:28:56.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-04T20:51:59.714279Z", "id": "CVE-2025-12188", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T20:52:13.667Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12188", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-04T20:51:59.714279Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T20:52:05.018Z"}}], "cna": {"title": "Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update", "credits": [{"lang": "en", "type": "finder", "value": "dayea song"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "wpmasterscom", "product": "Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.0.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-03T15:28:56.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/05f73a26-f637-4a1a-9f8c-98be8a146f00?source=cve"}, {"url": "https://wordpress.org/plugins/posts-navigation-links-for-sections-and-headings-free-by-wp-masters/"}], "descriptions": [{"lang": "en", "value": "The Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:33.004Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12188", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:33:33.004Z", "dateReserved": "2025-10-24T19:57:28.785Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-04T04:27:12.323Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "id": "CVE-2025-12188", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}]}, "published": "2025-11-04T05:16:10.980", "references": [{"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/posts-navigation-links-for-sections-and-headings-free-by-wp-masters/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/05f73a26-f637-4a1a-9f8c-98be8a146f00?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T16:44:58.704488+00:00", "value": {"mitigation_remediation": ["Update the Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin to the latest version that removes the nonce validation flaw.", "If an immediate update is not feasible, temporarily disable the settings modification functionality or restrict administrator access using a role\u2011based access control plugin.", "Apply a Web Application Firewall rule to inspect and block HTTP requests that lack a valid nonce token for the 'wpm_navigation_links_settings' endpoint."], "summary": {"action": "Patch", "impact": "Cross-Site Request Forgery leading to unauthorized settings changes"}, "threat_synthesis": {"affected_systems": "WordPress sites running the Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin version 1.0.1 or earlier are impacted. The plugin is distributed under the WP Masters brand and is installed via the WordPress plugin repository.", "description_and_impact": "The Posts Navigation Links for Sections and Headings \u2013 Free by WP Masters plugin for WordPress is affected by a Cross\u2011Site Request Forgery vulnerability. The flaw stems from missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page, allowing unauthenticated attackers to forge requests that update plugin settings when an administrator follows a crafted link. This can result in unauthorized configuration changes, potentially altering navigation behaviour or exposing other weaknesses if the plugin interacts with sensitive data.", "risk_and_exploitability": "The CVSS score of 4.3 indicates a moderate severity. The EPSS score of less than 1% reflects a very low probability of exploitation in the wild, and the vulnerability is not currently listed in the CISA KEV catalog. Attackers would need to persuade an authenticated administrator to click a malicious link; the vulnerability is not exploitable by remote code execution or arbitrary data disclosure."}}}}, "created": "2025-11-04T16:33:01.853276+00:00", "updated": "2026-04-22T16:45:21.467031+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "wpmasterscom", "wpmasterscom$PRODUCT$posts_navigation_links_for_sections_and_headings"]}