7.1 High

CVE-2025-48353 Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront)…

Description

Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WordPress Plugin (Niche Storefront): from n/a through <= 1.3.5.

Affected products and versions

Product	Affected versions	Fixed in
Clickbank WordPress Plugin (Niche Storefront) 1.3	earliest → 1.3.5	No fix stated

Do you use Clickbank WordPress Plugin (Niche Storefront)?

Track this CVE Watch Clickbank WordPress Plugin (Niche Storefront) Check my SBOMs

www.cveye.io/en/cve/CVE-2025-48353

Timeline

Published August 28, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE