CVE-2025-12373 | Torod Plugin up to 1.9 on WordPress Setting save_settings cross-site request forgery

December 5, 2025 Yanac

A vulnerability identified as problematic has been detected in Torod Plugin up to 1.9 on WordPress. Affected by this vulnerability is the function save_settings of the component Setting Handler. Performing manipulation results in cross-site request forgery.

This vulnerability is known as CVE-2025-12373. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More