CVE-2025-1436

Summary

CVE-2025-1436 is a vulnerability affecting the Limit Bio WordPress plugin before version 1.0. This issue allows attackers to execute Stored Cross-Site Scripting (XSS) attacks against logged-in admin users. The plugin lacks Cross-Site Request Forgery (CSRF) protection, making it vulnerable to such attacks. Additionally, there is no sanitization or escaping in place during the plugin's settings update process, contributing to this security weakness. Attackers can exploit this to inject malicious scripts into the targeted site and potentially steal sensitive information or gain unauthorized access. Users are urged to update the plugin to a secure version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.