WordPress Plugin ATT YouTube Widget Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin ATT YouTube Widget, no detaile...

CVE-2025-48359

CVE-2025-48359 describes a CSRF to Stored XSS in the WordPress ATT YouTube Widget (versions up to and including 1.0). The root cause is CSRF protection gaps that permit stored XSS when the widget is interacted with or data is submitted, potentially enabling an attacker to inject script that is st...