CVE-2025-23880

CVE-2025-23880 describes a CSRF to Stored XSS in the amr personalise (WordPress plugin) up to version 2.10. Public sources (Red Hat RH CVE page and Wordfence vulnerability detail) confirm the issue affects amr personalise and indicate patch status is Unpatched. The description across connected do...

CVE-2025-23880 WordPress amr personalise plugin <= 2.10 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in anmari amr personalise amr-personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through = 2.10...