CVE-2025-12400 | LMB Box Smileys Plugin up to 3.2 on WordPress Setting manage_page cross-site request forgery

A vulnerability categorized as problematic has been discovered in LMB Box Smileys Plugin up to 3.2 on WordPress. This vulnerability affects the function manage_page of the component Setting Handler. Executing manipulation can lead to cross-site request forgery.

This vulnerability is tracked as CVE-2025-12400. The attack can be launched remotely. No exploit exists.