CVE-2025-62950: WordPress Contest Gallery plugin <= 28.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Published Nov 6, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0.
Affected Software
2 affected components
Wasiliy Strecker Contest Gallery<=28.0.0
WordPress Contest Gallery plugin<=28.0.0
Event History
Nov 6, 2025
CVE Published
via MITRE·03:56 PM
Data Sourced
via MITRE·03:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62950?
CVE-2025-62950 has a medium severity rating due to its Cross-Site Request Forgery (CSRF) nature.
2
How do I fix CVE-2025-62950?
To fix CVE-2025-62950, upgrade the Contest Gallery plugin to version 28.0.1 or later.
3
Which versions are affected by CVE-2025-62950?
CVE-2025-62950 affects all versions of Contest Gallery up to and including 28.0.0.
4
What type of vulnerability is CVE-2025-62950?
CVE-2025-62950 is categorized as a Cross-Site Request Forgery (CSRF) vulnerability.
5
Who is impacted by CVE-2025-62950?
Users of the Contest Gallery plugin for WordPress, specifically versions up to 28.0.0, are impacted by CVE-2025-62950.