Hasthemes Wp Plugin Manager vulnerabilities

• hasthemes wp plugin manager WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-64271 4.3 MediumNovember 13, 2025
• hasthemes wp plugin manager WP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRF CVE-2023-1088 4.3 MediumMarch 27, 2023