CVE-2025-52784

CVE-2025-52784 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Bluff Post WordPress plugin that allows Stored XSS. Affected software: Bluff Post versions from 0 through 1.1.1 (as stated). Root cause: insufficient CSRF protection enabling stored payload execution. Public sources...

WordPress Bluff Post plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bluff Post versions = 1.1.1...