CVE-2025-14399 | Download Plugins and Themes in ZIP from Dashboard Plugin download_plugin_bulk cross-site request forgery

A vulnerability described as problematic has been identified in Download Plugins and Themes in ZIP from Dashboard Plugin up to 1.9.6 on WordPress. The affected element is the function download_plugin_bulk. The manipulation results in cross-site request forgery.

This vulnerability is identified as CVE-2025-14399. The attack can be executed remotely. There is not any exploit available.