{"uuid": "f7e37356-5a93-4e0e-9aa3-95f0967d2904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-22T05:00:05.230240Z"}