CVE-2025-23660

CVE-2025-23660 describes a Cross-Site Request Forgery (CSRF) vulnerability in MFPlugin that enables Stored XSS. The entry states the issue affects MFPlugin versions from n/a through 1.3 and does not specify affected WordPress contexts, payloads, or exploit details. Red Hat’s related record corrob...