Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-23677

WordPress HTTP to HTTPS link changer by Eyga.net plugin <= 0.2.4 - CSRF to Stored XSS vulnerability

Description

Cross-Site Request Forgery (CSRF) vulnerability in DSmidge HTTP to HTTPS link changer by Eyga.net https-links-in-content allows Stored XSS.This issue affects HTTP to HTTPS link changer by Eyga.net: from n/a through <= 0.2.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DSmidge HTTP to HTTPS link changer by Eyga.net

Default version status: unaffected

  • 0 to ≤ 0.2.4affected

References