CVE-2025-1288

The WOOEXIM WordPress plugin in versions prior to 5.0.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. Due to a lack of CSRF checks, insufficient sanitization, and missing escaping in certain areas, an attacker can cause an unauthenticated user to be vulnerable to reflected XSS . To...