BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-06

Assigner: Wordfence

Description

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for unauthenticated attackers to delete arbitrary posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2025-10-06

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9885

EUVD

EUVD-2025-32509

Affected Vendors & Products

Vendor	Product	Version / Range
wordpress	mpwizard	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the MPWizard – Create Mercado Pago Payment Links plugin for WordPress, affecting all versions up to and including 1.2.1. It occurs because of missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This flaw allows unauthenticated attackers to trick a site administrator into performing unintended actions, such as deleting arbitrary posts, by sending a forged request.

Impact Analysis

The vulnerability can allow an attacker to delete arbitrary posts on a WordPress site if they can trick an administrator into clicking a malicious link. This could lead to loss of content or disruption of site functionality without the administrator's consent.

Hi! I’m here to help you understand CVE-2025-9885. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70