CVE-2025-1436

The Limit Bio WordPress plugin (versions 1.0 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when updating settings. Additionally, the plugin fails to perform proper sanitization and escaping . These flaws could allow an attacker to trick a l...

CVE-2024-13884

The Limit Bio WordPress plugin, affecting versions 1.0 and earlier , contains a Reflected Cross-Site Scripting (XSS) vulnerability. This issue is caused by the failure to properly sanitise and escape a parameter before it is outputted back onto the page. An attacker could leverage this to target ...