PT-2025-51462 · WordPress · Meks Quick Plugin Disabler

Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-68083

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Meks Meks Quick Plugin Disabler versions through 1.0

Description The Meks Quick Plugin Disabler software contains a Cross-Site Request Forgery issue. An attacker could potentially perform actions on behalf of an authenticated user without their knowledge.

Recommendations Versions prior to 1.0 should be updated.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-68083

Affected Products

Meks Quick Plugin Disabler

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-68083 · Security Note
• https://twitter.com/CVEnew/status/2001350883167383565 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/meks-quick-plugin-disabler/vulnerability/wordpress-meks-quick-plugin-disabler-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2000919847773888792 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/meks-quick-plugin-disabler/vulnerability/wordpress-meks-quick-plugin-disabler-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/39943 · Telegram Post