CVE-2025-57905: 
WordPress vulnerability analysis and mitigation

Cross-Site Request Forgery (CSRF) vulnerability affects Amin Y AgreeMe Checkboxes For WooCommerce plugin versions through 1.1.3. The vulnerability was discovered by Nabil Irawan and was publicly disclosed on September 22, 2025. This security issue has been assigned CVE-2025-57905 and received a CVSS v3.1 base score of 4.3 (MEDIUM) (Patchstack).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery). It received a CVSS v3.1 Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, indicating network accessibility, low attack complexity, no privileges required, user interaction required, unchanged scope, no impact on confidentiality, low impact on integrity, and no impact on availability (NVD).

This vulnerability could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. The severity is considered low, with a CVSS score of 4.3, suggesting limited potential impact (Patchstack).

Currently, there is no official fix available for this vulnerability. The issue affects versions up to and including 1.1.3 of the AgreeMe Checkboxes For WooCommerce plugin (Patchstack).