Vulnerability Bulletins

CVE-2025-28894

   
Affected software WORDPRESS
 
Cross-Site Request Forgery (CSRF) vulnerability in frucomerci List of Posts from each Category plugin for WordPress allows Stored XSS. This issue affects List of Posts from each Category plugin for WordPress: from n/a through 2.0.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-28894