A vulnerability categorized as problematic has been discovered in TextBuilder Plugin up to 1.0.0/1.1.1 on WordPress. This impacts the function
handleToken
. Such manipulation leads to cross-site request forgery.
This vulnerability is uniquely identified as CVE-2025-9213. The attack can be launched remotely. No exploit exists.