PT-2025-38833 · WordPress · Damian Bp Disable Activation Reloaded

Nabil Irawan · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-57983

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Damian BP Disable Activation Reloaded versions through 1.2.1

Description A Cross-Site Request Forgery issue exists in Damian BP Disable Activation Reloaded. The issue involves accessing functionality that is not properly constrained by Access Control Lists (ACLs).

Recommendations Update Damian BP Disable Activation Reloaded to a version later than 1.2.1.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-57983

Affected Products

Damian Bp Disable Activation Reloaded

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-57983 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/bp-disable-activation-reloaded/vulnerability/wordpress-bp-disable-activation-reloaded-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255659548684664 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/bp-disable-activation-reloaded/vulnerability/wordpress-bp-disable-activation-reloaded-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note