CVE-2025-22557 WordPress News Publisher Autopilot plugin <= 2.1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in cdowp News Publisher Autopilot wpm-news-api allows Cross Site Request Forgery.This issue affects News Publisher Autopilot: from n/a through = 2.1.4...

CVE-2025-22557

CVE-2025-22557 affects News Publisher Autopilot. A CSRF vulnerability can lead to stored XSS; impact described as Cross-Site Forgery to Stored Cross-Site Scripting. Affected versions are up to 2.1.4 (from n/a through 2.1.4). The entry cites ongoing risk with Unpatched status in related feeds. No ...

CVE-2025-22557 WordPress News Publisher Autopilot plugin <= 2.1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPMagic News Publisher Autopilot allows Cross Site Request Forgery.This issue affects News Publisher Autopilot: from n/a through 2.1.4...