Skip to content
Sign in
7.1 High

CVE-2025-1436 The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing…

Description

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Affected products and versions

Product Affected versions Fixed in
Limit Bio 1.0 earliest → 1.0 No fix stated

Other CVEs of Limit Bio

The 2 CVEs of Limit Bio →
CVE-2024-13884 The Limit Bio WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the… 7.1 High
Track this CVE