A vulnerability classified as problematic was found in User Generator and Importer Plugin up to 1.2.2 on WordPress. Impacted is an unknown function. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2025-12879. It is possible to launch the attack remotely. No exploit is available.