CVE-2025-39593: Everaccounting Ever Accounting

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in EverAccounting Ever Accounting wp-ever-accounting allows Cross Site Request Forgery.This issue affects Ever Accounting: from n/a through <= 2.1.5.

Affected products

• Everaccounting Ever Accounting: up to and including 2.1.5

Published 2025-04-16. Last modified 2026-06-17.