CVE-2025-22328 WordPress Elevio plugin <= 4.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Elevio by Dixa Elevio elevio allows Stored XSS.This issue affects Elevio: from n/a through = 4.4.1...

CVE-2025-22328

CVE-2025-22328 : Elevio WordPress plugin vulnerable to Cross-Site Request Forgery (CSRF) that enables Stored XSS. Connected sources specify Elevio

WordPress plugin Elevio has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...