A vulnerability, which was classified as problematic, has been found in HasThemes WP Plugin Manager up to 1.4.7 on WordPress. This issue affects some unknown processing. This manipulation causes cross-site request forgery.

This vulnerability is tracked as CVE-2025-64271. The attack is possible to be carried out remotely. No exploit exists.