CVE-2025-28875

CVE-2025-28875 : Stored Cross-Site Scripting in the WordPress plugin BP Email Assign Templates (shanebp) affecting versions in the range

CVE-2025-28874

BP Email Assign Templates by shanebp is documented as CVE-2025-28874: an Authorization Bypass Through User-Controlled Key affecting versions 1.6 and earlier due to misconfigured access control. The connected sources state the vulnerability exists and that patch information is not provided (Unpatc...