CVE-2025-0865 | debaat Media Category Management Plugin up to 2.3.3 on WordPress wp_mcm_handle_action_settings cross-site request forgery

A vulnerability was found in debaat Media Category Management Plugin up to 2.3.3 on WordPress. It has been declared as problematic. This vulnerability affects the function wp_mcm_handle_action_settings. The manipulation leads to cross-site request forgery.

This vulnerability was named CVE-2025-0865. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.