CVE-2025-23895

CVE-2025-23895: CSRF to Stored XSS in the WordPress Add RSS plugin (Add RSS) allows Stored XSS. Affected: Add RSS plugin (WordPress) up to version 1.5. Root cause: CSRF enabling stored XSS in RSS feed handling. Exploitation details are not provided in the documents. Remediation status: patch/stat...

CVE-2025-23895 WordPress Add RSS plugin <= 1.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dan Cameron Add RSS add-rss allows Stored XSS.This issue affects Add RSS: from n/a through = 1.5...