CVE-2025-67651

unknowncovered by 1 sourcefirst seen 2026-07-31

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list.

⚡ Watch CVE-2025-67651

Get an email if CVE-2025-67651 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.

Advisory coverage (1)

unknownCVE-2025-67651: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers …nvd · 2026-07-31

External references

NVD record for CVE-2025-67651

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2025-67651 status](https://www.csirts.com/badge/CVE-2025-67651)](https://www.csirts.com/cve/CVE-2025-67651)