CVE-2025-23560

Cross-Site Request Forgery CSRF vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through = 1.2...

CVE-2025-23560

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3ysho4n2n 2025-01-16 22:38:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113840429073412835...

CVE-2025-23560

Cross-Site Request Forgery CSRF vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through = 1.2...

CVE-2025-23560 WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through = 1.2...

CVE-2025-23560 WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through = 1.2...

CVE-2025-23560

CVE-2025-23560 is a CSRF-based vulnerability in Web Testimonials (Elke Hinze, Plumeria Web Design) that enables Stored XSS. Affected: Web Testimonials plugin, version range from n/a through 1.2. Root cause: CSRF allows injection of stored script payloads into a context where user-provided data is...