TI-2025-28997 CVE-2025-46245 · GHSA-xm7m-4vx5-9ww4WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) VulnerabilityPriority LOW 37Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer cm-ad-changer allows Cross Site Request Forgery.This issue affects CM Ad Changer: from n/a through <= 2.0.5.CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00175 · Published 2025-04-22 · No fix listed CWE-352