A vulnerability was found in SH Contextual Help Plugin up to 3.2.1 on WordPress. It has been declared as problematic. Affected by this issue is the function sh_contextual_help_dashboard_widget of the component Setting Handler. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2025-12410. It is possible to launch the attack remotely. No exploit is available.