PT-2025-38913 · WordPress · Apustheme Findgo

Published 2025-09-22 · Updated 2025-09-23 · CVE-2025-58250

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ApusTheme Findgo versions through 1.3.55

Description ApusTheme Findgo is susceptible to a Cross-Site Request Forgery issue that can lead to Authentication Bypass. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge.

Recommendations Update ApusTheme Findgo to a version later than 1.3.55.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-58250

Affected Products

Apustheme Findgo

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-58250 · Security Note
• https://patchstack.com/database/wordpress/theme/fingo/vulnerability/wordpress-findgo-theme-1-3-55-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1970196584064270643 · Twitter Post
• https://twitter.com/CVEnew/status/1970393488446345236 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/fingo/vulnerability/wordpress-findgo-theme-1-3-55-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note