CVE-2025-57902: 
WordPress vulnerability analysis and mitigation

Cross-Site Request Forgery (CSRF) vulnerability was discovered in Md Taufiqur Rahman RIS Version Switcher – Downgrade or Upgrade WP Versions Easily WordPress plugin version 1.0 and below. The vulnerability was disclosed on September 22, 2025, and assigned identifier CVE-2025-57902. The vulnerability received a CVSS v3.1 base score of 6.5 (Medium) (Patchstack).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery). It has been assigned a CVSS v3.1 Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, indicating that it can be exploited over the network, requires low attack complexity, needs no privileges, requires user interaction, and can result in high impact to integrity (NVD).

This vulnerability could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. The impact primarily affects the integrity of the system, with no direct effect on confidentiality or availability (Patchstack).

As of the disclosure date, no official fix is available for this vulnerability. The security issue has been classified as having a low severity impact and is considered unlikely to be exploited (Patchstack).