CVE-2025-23566

creationtimestamp| type| source ---|---|--- 2025-01-16 20:18:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3yuty2n2j 2025-01-16 22:38:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113840429087573514...

CVE-2025-23566 WordPress Custom Post plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in syedamirhussain91 Custom Post custom-post-type-gui allows Stored XSS.This issue affects Custom Post: from n/a through = 1.0...

CVE-2025-23566 WordPress Custom Post plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Syed Amir Hussain Custom Post allows Stored XSS.This issue affects Custom Post: from n/a through 1.0...

CVE-2025-23566

CVE-2025-23566 describes a Cross-Site Request Forgery (CSRF) that enables Stored XSS in the WordPress plugin named Custom Post. Affected component: Custom Post (WordPress plugin) with vulnerability chain CSRF -&gt; Stored XSS. CVSS 3.1/3.1 metrics show Network attack vector, Low confidentiality/i...