CVE-2025-14853 | LEAV Last Email Address Validator Plugin up to 1.7.1 on WordPress Setting display_settings_page cross-site request forgery

January 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in LEAV Last Email Address Validator Plugin up to 1.7.1 on WordPress. This issue affects the function display_settings_page of the component Setting Handler. Performing a manipulation results in cross-site request forgery.

This vulnerability was named CVE-2025-14853. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More