CVE-2025-68567: WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through <= 3.6.33.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68567?
CVE-2025-68567 is a Cross-Site Request Forgery (CSRF) vulnerability, which is generally considered to have a medium severity due to the potential for unauthorized actions.
How do I fix CVE-2025-68567?
To fix CVE-2025-68567, update My auctions allegro to the latest version beyond 3.6.32 to mitigate the CSRF vulnerability.
What versions are affected by CVE-2025-68567?
CVE-2025-68567 affects My auctions allegro versions up to and including 3.6.32.
What are the risks associated with CVE-2025-68567?
The risks of CVE-2025-68567 include unauthorized actions being performed by attackers on behalf of authenticated users.
How can I identify if my site is vulnerable to CVE-2025-68567?
You can identify if your site is vulnerable to CVE-2025-68567 by checking if you are using My auctions allegro version 3.6.32 or earlier.