WordPress Custom Functions Plugin plugin <= 1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Custom Functions Plugin versions = 1.1...

CVE-2025-46512

CVE-2025-46512 describes a CSRF to Stored XSS vulnerability in Shamim Hasan Custom Functions Plugin (WordPress) affecting versions from n/a through 1.1. The CVSSv3.1 base score is 7.1 ( HIGH ) with network attack vector, requiring user interaction. Affected component is the Custom Functions Plugi...