Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-1288

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

  • Published: May 15, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-1288
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
bulktheme / wooexim - 5.0.0.x