CVE-2025-22538

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22538

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62g3jiot2k 2025-01-07 17:40:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/486...

CVE-2025-22538 WordPress Virtual Bot Plugin <= 1.0.0 - CSRF Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Stored XSS.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22538

CVE-2025-22538 is a CSRF-to-stored-XSS issue affecting the Virtual Bot plugin for WordPress (versions up to 1.0.0). The connected Wordfence entry confirms the vulnerability type and impacted version; no remediation details are provided in the supplied documents.