CVE-2025-0990
WordPress vulnerability analysis and mitigation

Overview

The I Am Gloria WordPress plugin version 1.1.4 and below was identified with a Cross-Site Request Forgery (CSRF) vulnerability, assigned CVE-2025-0990. The vulnerability was discovered and disclosed in March 2025, leading to the temporary closure of the plugin from the WordPress repository on March 3, 2025, pending a full security review (WordPress Plugin, Wordfence Intel).

Technical details

The vulnerability has been classified as a Cross-Site Request Forgery (CSRF) issue with a CVSS score of 4.3, indicating moderate severity. The affected versions include I Am Gloria plugin version 1.1.4 and all previous versions (Wordfence Intel).

Impact

Cross-Site Request Forgery vulnerabilities can allow attackers to perform unauthorized actions on behalf of authenticated users, potentially compromising the security and integrity of the WordPress installation (Wordfence Intel).

Mitigation and workarounds

As a precautionary measure, the plugin has been temporarily closed and removed from the WordPress plugin repository as of March 3, 2025. Users are advised to disable and remove the plugin until a security review is completed and a patched version is released (WordPress Plugin).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management