Boletines de Vulnerabilidades

CVE-2025-28894

   
Software afectado WORDPRESS
 
Cross-Site Request Forgery (CSRF) vulnerability in frucomerci List of Posts from each Category plugin for WordPress allows Stored XSS. This issue affects List of Posts from each Category plugin for WordPress: from n/a through 2.0.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-28894