CVE-2025-23502 WordPress Curated Search plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in NotFound Curated Search allows Stored XSS. This issue affects Curated Search: from n/a through 1.2...

CVE-2025-23502

The CVE-2025-23502 entry concerns the WordPress Curated Search plugin (versions up to 1.2). The vulnerability is CSRF that enables Stored XSS, affecting Curated Search from n/a through 1.2. The connected sources consistently describe Cross-Site Request Forgery leading to stored cross-site scripti...