CVE-2025-24714 — Cross-Site Request Forgery in Bubble Menu Circle Floating Menu

CWE-352 — Cross-Site Request Forgery3 documents3 sources
Severity
—N/A
No vector
EPSS
0.1%
top 76.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Wow-company Bubble Menu Circle Floating Menu
Timeline
PublishedJan 24

Description

Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through <= 4.0.2.

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3p9q-2c9q-vq29: Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu allows Cross Site Request Forgery↗2025-01-24
▶
CVEList
WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability↗2025-01-24
▶
CVE-2025-24714 — Cross-Site Request Forgery | cvebase