PT-2025-54393 · Omid Shamloo · Pardakht Delkhah

Nabil Irawan · Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-62101

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pardakht Delkhah versions through 3.0.0

Description A Cross-Site Request Forgery (CSRF) issue exists in Omid Shamloo Pardakht Delkhah, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient protection against CSRF attacks.

Recommendations Update Pardakht Delkhah to a version beyond 3.0.0.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-62101

Affected Products

Pardakht Delkhah

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62101 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/pardakht-delkhah/vulnerability/wordpress-pardakht-delkhah-plugin-3-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/pardakht-delkhah/vulnerability/wordpress-pardakht-delkhah-plugin-3-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/pardakht-delkhah/vulnerability/wordpress-pardakht-delkhah-plugin-3-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495424769597806 · Twitter Post