PT-2025-54335 · Jayce53 · Easyindex

Nabil Irawan · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-62117

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Jayce53 EasyIndex versions through 1.1.1704

Description A Cross-Site Request Forgery (CSRF) issue exists in Jayce53 EasyIndex. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The issue affects the application's handling of requests, potentially allowing malicious actions to be executed if a user is logged in and visits a crafted website.

Recommendations Update Jayce53 EasyIndex to a version beyond 1.1.1704.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-62117

Affected Products

Easyindex

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62117 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/easyindex/vulnerability/wordpress-easyindex-plugin-1-1-1704-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006736834412581031 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/easyindex/vulnerability/wordpress-easyindex-plugin-1-1-1704-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/easyindex/vulnerability/wordpress-easyindex-plugin-1-1-1704-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note