CVE-2025-22297

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cross-Site Request Forgery (CSRF) vulnerability in aipost AI WP Writer ai-wp-writer allows Cross Site Request Forgery.This issue affects AI WP Writer: from n/a through <= 3.8.4.4.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/ai-wp-writer/vulnerability/wordpress-ai-wp-writer-plugin-3-8-4-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

AI Visionary@zsvv7723h
@wordfence @patchstackapp @wptavern @BleepinComputer 4/ Verified not a dupe: diffed the 3.6.5 / 3.6.5.6 packages — the assistcron action doesn't exist there; it was added after the CVE-2024-30459 fix. Also distinct from CVE-2025-22297 (CSRF). Affects the latest 4.6.3.2. CVSS 5.3 (Medium).
0000016
38 followersView on X

Explore more

Back to dashboard