CVE-2025-10376

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10376", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-12T15:44:43.342Z", "datePublished": "2025-10-11T09:28:42.803Z", "dateUpdated": "2026-04-08T17:32:13.009Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:32:13.009Z"}, "affected": [{"vendor": "ercbs", "product": "Course Redirects for Learndash Plugin", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "0.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Course Redirects for Learndash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4. This is due to missing nonce validation when processing form submissions on the settings page. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "title": "Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f04ef770-73d9-4940-9736-c214bf5137ba?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/course-redirects-for-learndash/trunk/redirect_course.php#L76"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "cweId": "CWE-352", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "timeline": [{"time": "2025-10-10T20:30:28.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-14T18:31:50.415252Z", "id": "CVE-2025-10376", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-14T18:44:36.808Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10376", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T18:31:50.415252Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-14T18:31:51.141Z"}}], "cna": {"title": "Course Redirects for Learndash Plugin <= 0.4 - Cross-Site Request Forgery", "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "ercbs", "product": "Course Redirects for Learndash Plugin", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "0.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-10T20:30:28.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f04ef770-73d9-4940-9736-c214bf5137ba?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/course-redirects-for-learndash/trunk/redirect_course.php#L76"}], "descriptions": [{"lang": "en", "value": "The Course Redirects for Learndash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4. This is due to missing nonce validation when processing form submissions on the settings page. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:32:13.009Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10376", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:32:13.009Z", "dateReserved": "2025-09-12T15:44:43.342Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-11T09:28:42.803Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Course Redirects for Learndash Plugin", "vendor": "ercbs", "versions": [{"lessThanOrEqual": "0.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Course Redirects for Learndash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4. This is due to missing nonce validation when processing form submissions on the settings page. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."}, {"lang": "es", "value": "El plugin Course Redirects for Learndash para WordPress es vulnerable a la falsificaci\u00f3n de petici\u00f3n en sitios cruzados en todas las versiones hasta la 0.4, inclusive. Esto se debe a la falta de validaci\u00f3n de nonce al procesar env\u00edos de formularios en la p\u00e1gina de configuraci\u00f3n. Esto hace posible que atacantes no autenticados modifiquen la configuraci\u00f3n del plugin a trav\u00e9s de una petici\u00f3n falsificada, siempre que puedan enga\u00f1ar a un administrador del sitio para que realice una acci\u00f3n como hacer clic en un enlace."}], "id": "CVE-2025-10376", "lastModified": "2026-10-08T13:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10376", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-14T18:31:50.415252Z", "version": "2.0.3"}}]}, "published": "2025-10-11T10:15:42.477", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/course-redirects-for-learndash/trunk/redirect_course.php#L76"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f04ef770-73d9-4940-9736-c214bf5137ba?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T02:22:05.664813+00:00", "value": {"mitigation_remediation": ["Update Course Redirects for Learndash to a version newer than 0.4, which contains the missing nonce validation fix.", "If an update is not immediately available, implement a nonce check on the settings page to enforce request authenticity and prevent CSRF.", "Limit access to the plugin\u2019s settings page to trusted administrators only and monitor configuration changes for unexpected activity."], "summary": {"action": "Upgrade Plugin", "impact": "Unauthorized configuration change via CSRF"}, "threat_synthesis": {"affected_systems": "WordPress installations that use the Course Redirects for Learndash plugin from ercbs, specifically any version up to and including 0.4. Sites that have this plugin installed and have active administrator accounts are vulnerable.", "description_and_impact": "The Course Redirects for Learndash plugin for WordPress contains a missing nonce validation on the settings page, which allows an unauthenticated attacker to forge a request and alter plugin settings. This is a classic CSRF flaw (CWE-352) that can affect site behavior and user experience by applying unauthorized configuration changes. The flaw does not directly expose data or execute arbitrary code, but it enables an attacker to modify settings that could lead to further exploitation or service disruption.", "risk_and_exploitability": "The CVSS score of 4.3 indicates moderate severity, while the EPSS score of less than 1% shows a very low probability of exploitation. This vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is social engineering: an attacker needs to lure a site administrator into clicking a crafted link or submitting a forged form that targets the settings page. Because the exploit requires administrator interaction and does not require privileged credentials or local network access, the overall risk is moderate but the chance of real-world exploitation is low."}}}}, "created": "2025-10-21T13:12:32.671101+00:00", "updated": "2026-04-21T02:30:25.829316+00:00", "vendors": ["ercbs", "ercbs$PRODUCT$course_redirects_for_learndash_plugin", "wordpress", "wordpress$PRODUCT$wordpress"]}