CVE-2025-48238

Cross-Site Request Forgery CSRF vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.18...

WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin AWcode Toolkit versions = 1.0.18...

CVE-2025-48238 WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.18...

CVE-2025-48238 WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in awcode AWcode Toolkit awcode-toolkit allows Stored XSS.This issue affects AWcode Toolkit: from n/a through = 1.0.18...

CVE-2025-48238

AWcode Toolkit (WordPress) is affected by CVE-2025-48238: CSRF can lead to Stored XSS in versions up to and including 1.0.18. The CVSSv3.1 base score is 7.1 (HIGH). Remediation per the sources is to update to a version that contains the fix; if upgrading is not possible, apply the noted mitigatio...