CVE-2025-23660

CVE-2025-23660 describes a Cross-Site Request Forgery (CSRF) vulnerability in MFPlugin that enables Stored XSS. The entry states the issue affects MFPlugin versions from n/a through 1.3 and does not specify affected WordPress contexts, payloads, or exploit details. Red Hat’s related record corrob...

CVE-2025-23660 WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in waltercerrudo MFPlugin mfplugin allows Stored XSS.This issue affects MFPlugin: from n/a through = 1.3...

CVE-2025-23660 WordPress MFPlugin plugin <= 1.3 - CSRF to Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3...