CVE-2025-14037 | Invelity Product Feeds Plugin up to 1.2.6 on WordPress Requests createManageFeedPage cross-site request forgery

A vulnerability classified as problematic was found in Invelity Product Feeds Plugin up to 1.2.6 on WordPress. This affects the function createManageFeedPage of the component Requests Handler. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is handled as CVE-2025-14037. The attack can be executed remotely. There is not any exploit available.