CVE-2025-25088: Cross-Site Request Forgery (CSRF) in blackus3r WP Keyword Monitor
Cross-Site Request Forgery (CSRF) vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through <= 1.0.5.
AI Analysis
Technical Summary
The blackus3r WP Keyword Monitor plugin versions up to 1.0.5 contain a CSRF vulnerability that could allow attackers to execute unauthorized actions by exploiting the trust of an authenticated user. The vulnerability is remotely exploitable without privileges and requires user interaction. It impacts confidentiality, integrity, and availability to a limited extent. The product is cloud-hosted, and the vendor manages remediation for this service.
Potential Impact
Successful exploitation of this CSRF vulnerability could lead to limited confidentiality, integrity, and availability impacts within the WP Keyword Monitor plugin environment. Since it requires user interaction and no privileges, an attacker could potentially cause an authenticated user to perform unintended actions affecting the plugin's operation or data.
Mitigation Recommendations
The vendor manages remediation for this cloud-hosted service and a patch is available. Users should ensure that the WP Keyword Monitor plugin is updated to the latest version as provided by the vendor. Check the vendor advisory for confirmation of patch deployment and further guidance.
CVE-2025-25088: Cross-Site Request Forgery (CSRF) in blackus3r WP Keyword Monitor
Description
Cross-Site Request Forgery (CSRF) vulnerability in blackus3r WP Keyword Monitor wp-keyword-monitor allows Cross Site Request Forgery.This issue affects WP Keyword Monitor: from n/a through <= 1.0.5.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The blackus3r WP Keyword Monitor plugin versions up to 1.0.5 contain a CSRF vulnerability that could allow attackers to execute unauthorized actions by exploiting the trust of an authenticated user. The vulnerability is remotely exploitable without privileges and requires user interaction. It impacts confidentiality, integrity, and availability to a limited extent. The product is cloud-hosted, and the vendor manages remediation for this service.
Potential Impact
Successful exploitation of this CSRF vulnerability could lead to limited confidentiality, integrity, and availability impacts within the WP Keyword Monitor plugin environment. Since it requires user interaction and no privileges, an attacker could potentially cause an authenticated user to perform unintended actions affecting the plugin's operation or data.
Mitigation Recommendations
The vendor manages remediation for this cloud-hosted service and a patch is available. Users should ensure that the WP Keyword Monitor plugin is updated to the latest version as provided by the vendor. Check the vendor advisory for confirmation of patch deployment and further guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Patchstack
- Date Reserved
- 2025-02-03T13:34:11.344Z
- Cvss Version
- null
- State
- PUBLISHED
- Is Cloud Service
- true
Threat ID: 69cd7288e6bfc5ba1deeab67
Added to database: 4/1/2026, 7:31:20 PM
Last enriched: 5/1/2026, 9:43:34 AM
Last updated: 5/21/2026, 10:30:05 PM
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.