CVE-2025-49347

Cross-Site Request Forgery CSRF vulnerability in Jupitercow WP sIFR wp-sifr allows Stored XSS.This issue affects WP sIFR: from n/a through = 0.6.8.1...

CVE-2025-49347

CVE-2025-49347 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP sIFR (wp-sifr) used by Jupitercow, which can lead to a Stored XSS condition. The affected software is the WP sIFR plugin, specifically versions from unspecified n/a up to and including 0.6.8.1. P...

WordPress plugin WP sIFR 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...