CVE-2025-12407 | Events Manager Plugin up to 7.2.2.2 on WordPress location_delete cross-site request forgery

A vulnerability categorized as problematic has been discovered in Events Manager Plugin up to 7.2.2.2 on WordPress. Affected is the function location_delete. Executing manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2025-12407. The attack may be performed from remote. There is no available exploit.