CVE-2025-0522

Summary

CVE-2025-0522 is a vulnerability affecting the LikeBot WordPress plugin before version 0.85. This issue allows attackers to inject Stored Cross-Site Scripting (XSS) payloads through a Cross-Site Request Forgery (CSRF) attack. The plugin does not include a Cross-Site Request Forgery (CSRF) token check in certain areas and lacks adequate sanitization and escaping mechanisms, making it susceptible to this vulnerability. Successful exploitation could result in the injection of malicious scripts into the WordPress admin interface, potentially leading to unauthorized access or data theft. Users are advised to immediately update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.