CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-23817

WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability

Status: Published
Published: 2025-01-16
Updated: 2026-05-11
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in mahadirz MHR-Custom-Anti-Copy mhr-custom-anti-copy allows Stored XSS.This issue affects MHR-Custom-Anti-Copy: from n/a through <= 2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mahadirz MHR-Custom-Anti-Copy

Default version status: unaffected

0 to ≤ 2.0affected

References

https://patchstack.com/database/Wordpress/Plugin/mhr-custom-anti-copy/vulnerability/wordpress-mhr-custom-anti-copy-plugin-2-0-csrf-to-stored-cross-site-request-forgery-csrf-vulnerability?_s_id=cve ↗