CVE-2025-22343
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-22343 is a Cross-Site Request Forgery (CSRF) vulnerability identified in Dennis Koot's wpSOL. This issue permits an attacker to inject Stored Cross-Site Scripting (XSS) code into unsuspecting users' web sessions. The vulnerability affects wpSOL versions from n/a through 1.2.0, posing a significant risk to websites utilizing this plugin. Successful exploitation may result in the theft of sensitive user information or hijacking of user accounts. It is recommended that affected users update their wpSOL installations to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.