CVE-2025-28933

CVE-2025-28933 relates to the WordPress MaxA/B plugin (

PT-2025-10963

Name of the Vulnerable Software and Affected Versions: maxfoundry MaxA/B versions n/a through 2.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For maxfoundry MaxA/B versions n/a through 2.2.2, update to a version that fixes...

CVE-2025-28933: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in maxfoundry MaxA/B maxab allows Stored XSS.This issue affects MaxA/B: from n/a through = 2.2.2...