CVE-2025-52784

Cross-Site Request Forgery CSRF vulnerability in hideoguchi Bluff Post bluff-post allows Stored XSS.This issue affects Bluff Post: from n/a through = 1.1.1...

CVE-2025-52784

CVE-2025-52784 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Bluff Post WordPress plugin that allows Stored XSS. Affected software: Bluff Post versions from 0 through 1.1.1 (as stated). Root cause: insufficient CSRF protection enabling stored payload execution. Public sources...