PT-2025-54375 · Imdad Next Web · Inext Woo Pincode Checker

Muhammad Nur Ibnu Hubab · Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-62084

Positive Technologies · (AI Summary)

CVSS v3.1

4.3

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Imdad Next Web iNext Woo Pincode Checker versions through 2.3.1

Description The Imdad Next Web iNext Woo Pincode Checker is susceptible to a Cross-Site Request Forgery (CSRF) issue. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge. The issue allows Cross Site Request Forgery.

Recommendations Update to a version newer than 2.3.1.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-62084

Affected Products

Inext Woo Pincode Checker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-62084 · Security Note
• https://vdp.patchstack.com/database/wordpress/plugin/inext-woo-pincode-checker/vulnerability/wordpress-inext-woo-pincode-checker-plugin-2-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495447464935883 · Twitter Post
• https://t.me/CVEtracker/41087 · Telegram Post