PT-2025-35025 · Unknown · Century Toolkit

Nabil Irawan · Published 2025-08-28 · Updated 2025-08-28 · CVE-2025-48357

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Century ToolKit versions through 1.2.1

Description A Cross-Site Request Forgery (CSRF) vulnerability exists in Century ToolKit, allowing attackers to perform actions on behalf of an unsuspecting user. This issue enables Cross Site Request Forgery attacks.

Recommendations Update Century ToolKit to a version later than 1.2.1.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-48357

Affected Products

Century Toolkit

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-48357 · Security Note
• https://twitter.com/CVEnew/status/1961052828308320565 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/century-toolkit/vulnerability/wordpress-century-toolkit-plugin-1-2-1-cross-site-request-forgery-csrf-to-arbitrary-plugin-activation-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/century-toolkit/vulnerability/wordpress-century-toolkit-plugin-1-2-1-cross-site-request-forgery-csrf-to-arbitrary-plugin-activation-vulnerability?_s_id=cve · Note