CVE-2025-24636 | Laymance Technologies MachForm Shortcode Plugin up to 1.4.1 on WordPress cross-site request forgery

A vulnerability classified as problematic was found in Laymance Technologies MachForm Shortcode Plugin up to 1.4.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation leads to cross-site request forgery.

This vulnerability is known as CVE-2025-24636. The attack can be launched remotely. There is no exploit available.