PT-2025-29744 · Unknown · Fluentsnippets

Ananda Dhakal · CVE-2025-54010 · Published 2025-07-16 · Updated 2025-07-21

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FluentSnippets versions n/a through 10.50

Description A Cross-Site Request Forgery (CSRF) issue exists in FluentSnippets, potentially allowing attackers to perform actions on behalf of authenticated users.

Recommendations FluentSnippets versions prior to 10.51 are affected.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-54010

Affected Products

Fluentsnippets

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-54010 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/easy-code-manager/vulnerability/wordpress-fluentsnippets-plugin-10-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1945547122507497477 · Twitter Post
• https://twitter.com/cracbot/status/1947250265947783200 · Twitter Post
• https://twitter.com/CVEnew/status/1945435460257694085 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/easy-code-manager/vulnerability/wordpress-fluentsnippets-plugin-10-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1945547119508541652 · Twitter Post