CVE-2025-32270: WordPress Broadstreet plugin <= 1.52.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Broadstreet Broadstreet Ads broadstreet allows Cross Site Request Forgery.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Broadstreet Broadstreet allows Cross Site Request Forgery. This issue affects Broadstreet: from n/a through 1.51.1.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32270?
CVE-2025-32270 is classified as a Cross-Site Request Forgery (CSRF) vulnerability affecting the Broadstreet Plugin.
How do I fix CVE-2025-32270?
To fix CVE-2025-32270, update the Broadstreet Plugin to a version later than 1.51.1.
What versions of Broadstreet Plugin are affected by CVE-2025-32270?
CVE-2025-32270 affects all versions of the Broadstreet Plugin up to and including 1.51.1.
What are the potential impacts of CVE-2025-32270?
CVE-2025-32270 can allow attackers to perform actions on behalf of users without their consent, leading to unauthorized changes.
Is there a proof of concept available for CVE-2025-32270?
Details about proof of concept for CVE-2025-32270 may be found in specific security reports or advisories regarding the vulnerability.