{"id":"CVE-2025-32261","aliases":["EUVD-2025-9787","GHSA-8xvw-2mvx-v2mv"],"status":"published","title":"WordPress Advanced All in One Admin Search by WP Spotlight plugin \u003c= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through \u003c= 1.1.1.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00166,"percentile":0.05944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2025-04-04T15:59:31Z","modified":"2026-06-17T09:11:42Z","products":[{"vendor":"kuppuraj","product":"advanced all in one admin search by wp spotlight"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/wp-spotlight-search/vulnerability/wordpress-advanced-all-in-one-admin-search-by-wp-spotlight-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32261"},{"url":"https://patchstack.com/database/wordpress/plugin/wp-spotlight-search/vulnerability/wordpress-advanced-all-in-one-admin-search-by-wp-spotlight-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-8xvw-2mvx-v2mv"}],"sources":{"cve":[{"id":"CVE-2025-32261","title":"WordPress Advanced All in One Admin Search by WP Spotlight plugin \u003c= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through \u003c= 1.1.1.","status":"published","published":"2025-04-04T15:59:31.894Z","modified":"2026-04-28T16:12:19.966Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-9787","description":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through \u003c= 1.1.1.","status":"published","published":"2025-04-04T15:59:31Z","modified":"2026-04-28T16:12:19Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:45.143971Z"}],"ghsa":[{"id":"GHSA-8xvw-2mvx-v2mv","title":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by...","description":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight allows Cross Site Request Forgery. This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through 1.1.1.","status":"published","published":"2025-04-04T18:31:05Z","modified":"2025-04-04T18:31:12Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:00:48.912758Z"}],"nvd":[{"id":"CVE-2025-32261","description":"Cross-Site Request Forgery (CSRF) vulnerability in Kuppuraj Advanced All in One Admin Search by WP Spotlight wp-spotlight-search allows Cross Site Request Forgery.This issue affects Advanced All in One Admin Search by WP Spotlight: from n/a through \u003c= 1.1.1.","status":"published","published":"2025-04-04T16:15:36.72Z","modified":"2026-06-17T09:11:42.653Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:59.48027Z"}]}}