Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-25075

WordPress Show notice or message on admin area plugin <= 2.0 - CSRF to Stored XSS vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Show notice or message on admin area show-notice-or-message-on-admin-area allows Stored XSS.This issue affects Show notice or message on admin area: from n/a through <= 2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Venugopal Show notice or message on admin area

Default version status: unaffected

  • 0 to ≤ 2.0affected

References