Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-28901

WordPress Members page only for logged in users plugin <= 1.4.2 - CSRF to Stored XSS vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Naren Members page only for logged in users members-page-only-for-logged-in-users allows Stored XSS.This issue affects Members page only for logged in users: from n/a through <= 1.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Naren Members page only for logged in users

Default version status: unaffected

  • 0 to ≤ 1.4.2affected

References