A vulnerability was found in Mozilla Web Push Plugin up to 1.4.0 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery.

The identification of this vulnerability is CVE-2025-23720. The attack may be initiated remotely. There is no exploit available.