CVE-2025-1436

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2025-1436

The Limit Bio WordPress plugin, affecting versions 1.0 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks during settings updates. Furthermore, the plugin fails to implement proper sanitization and escaping , which could allow an attacker to tri...