CVE-2025-58199: WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability
Published Sep 22, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Fastly Fastly fastly allows Cross Site Request Forgery.This issue affects Fastly: from n/a through <= 1.2.28.
Affected Software
1 affected component
Fastly Fastly WordPress plugin<=1.2.28
Event History
Sep 22, 2025
CVE Published
via MITRE·06:23 PM
Data Sourced
via MITRE·06:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58199?
The severity of CVE-2025-58199 is categorized as high due to its potential impact on system security.
2
How do I fix CVE-2025-58199?
To fix CVE-2025-58199, upgrade Fastly to version 1.2.29 or later to eliminate the Cross-Site Request Forgery vulnerability.
3
Which versions of Fastly are affected by CVE-2025-58199?
CVE-2025-58199 affects all versions of Fastly from n/a through 1.2.28.
4
Does CVE-2025-58199 affect the WordPress Fastly Plugin?
Yes, CVE-2025-58199 affects the WordPress Fastly Plugin up to version 1.2.28.
5
What kind of attack does CVE-2025-58199 enable?
CVE-2025-58199 enables Cross-Site Request Forgery (CSRF) attacks which can compromise user actions on the application.