CVE-2025-62112: WordPress Import into Easy Property Listings plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Merv Barrett Import into Easy Property Listings allows Cross Site Request Forgery.This issue affects Import into Easy Property Listings: from n/a through 2.2.1.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Merv Barrett Import into Easy Property Listings easy-property-listings-xml-csv-import allows Cross Site Request Forgery.This issue affects Import into Easy Property Listings: from n/a through <= 2.2.1.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62112?
CVE-2025-62112 is classified as a high-severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2025-62112?
To fix CVE-2025-62112, update the Import into Easy Property Listings plugin to version 2.2.2 or later.
What software is affected by CVE-2025-62112?
CVE-2025-62112 affects the Import into Easy Property Listings plugin versions up to and including 2.2.1.
What type of vulnerability is CVE-2025-62112?
CVE-2025-62112 is a Cross-Site Request Forgery (CSRF) vulnerability.
Can I exploit CVE-2025-62112 to conduct unauthorized actions?
Yes, an attacker can exploit CVE-2025-62112 to perform unauthorized actions on behalf of logged-in users.