CVE-2025-12827 | Top Friends Plugin up to 0.3 on WordPress Setting top_friends_options_subpanel cross-site request forgery

November 17, 2025 Yanac

A vulnerability was found in Top Friends Plugin up to 0.3 on WordPress. It has been classified as problematic. This impacts the function top_friends_options_subpanel of the component Setting Handler. Performing manipulation results in cross-site request forgery.

This vulnerability is known as CVE-2025-12827. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More