CVE-2025-58939: WordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58939?
CVE-2025-58939 is a critical Cross-Site Request Forgery (CSRF) vulnerability that can allow attackers to perform unauthorized actions on behalf of users.
How do I fix CVE-2025-58939?
To fix CVE-2025-58939, update the Super Store Finder plugin to version 7.5 or later.
Who is affected by CVE-2025-58939?
CVE-2025-58939 affects users of the highwarden Super Store Finder and the WordPress Super Store Finder plugin versions up to and including 7.5.
What is Cross-Site Request Forgery in the context of CVE-2025-58939?
Cross-Site Request Forgery in CVE-2025-58939 allows attackers to trigger unwanted actions on behalf of authenticated users without their consent.
How can I prevent attacks related to CVE-2025-58939?
To prevent attacks related to CVE-2025-58939, ensure your plugins are up-to-date and utilize security plugins that add CSRF protection.