CVE-2025-64368

MEDIUM 5.4CVE-2025-64368 · Published 31/10/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
bard qodeinteractive	`< 1.7`	`1.7`

Description

Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.

References

patchstack.com/database/Wordpress/Theme/bardwp/vulnerability/wordpress-bard-theme-1-6-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free