CVE-2025-25106: Fancywp Starter Templates By Fancywp

Critical severity, CVSS 9.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through <= 2.0.0.

Affected products

• Fancywp Starter Templates By Fancywp: up to and including 2.0.0

Published 2025-02-07. Last modified 2026-06-17.