PT-2025-54381 · Manidoraisamy · Formfacade

Nabil Irawan · Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-62133

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Manidoraisamy FormFacade versions through 1.4.1

Description A Cross-Site Request Forgery (CSRF) issue exists in Manidoraisamy FormFacade, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient protection against forged requests.

Recommendations Update Manidoraisamy FormFacade to a version later than 1.4.1.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-62133

Affected Products

Formfacade

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62133 · Security Note
• https://vdp.patchstack.com/database/wordpress/plugin/formfacade/vulnerability/wordpress-formfacade-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/41090 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/formfacade/vulnerability/wordpress-formfacade-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495444428349729 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/formfacade/vulnerability/wordpress-formfacade-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note