plugin

Bmlt Wordpress Satellite Plugin Vulnerabilities

2 known security issues reported for the Bmlt Wordpress Satellite Plugin WordPress plugin. Most recent disclosed Dec 12, 2025.

1 medium

Running Bmlt Wordpress Satellite Plugin on your site? Check whether your installed version is affected.

Scan your site free

BMLT WordPress Plugin [bmlt-wordpress-satellite-plugin] <= 3.11.4 (unfixed)

unknown

[en] The BMLT WordPress Plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.11.4. This is due to missing nonce validation on the 'BMLTPlugin_create_option' and 'BMLTPlugin_delete_option ' action. This makes it possible for unauthenticated attackers to create new plug...

Affected:
up to 3.11.4
Fix:
No patched version reported
Disclosed:
Dec 12, 2025

CVE-2025-14162 on NVD →

BMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion

medium

The BMLT WordPress Plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.11.4. This is due to missing nonce validation on the 'BMLTPlugin_create_option' and 'BMLTPlugin_delete_option ' action. This makes it possible for unauthenticated attackers to create new plugin se...

CVSS:
4.3
Affected:
up to 3.11.4
Fixed in:
3.11.5
Disclosed:
Dec 11, 2025

CVE-2025-14162 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database