CVE-2025-9945

CVE-2025-9945 is a Cross-Site Request Forgery (CSRF) vulnerability affecting all versions up to and including 1.0.3 of the Optimize More! – CSS plugin for WordPress. This flaw stems from inadequate nonce validation in the plugin's reset_plugin function. An unauthenticated attacker could exploit this by tricking a site administrator into clicking a malicious link, leading to the unauthorized reset of the plugin's optimization settings. The vulnerability has a CVSS score of 4.3 (MEDIUM), indicating a network-based attack with low complexity, requiring user interaction, and resulting in low integrity impact (data modification). There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.