CVE-2025-25088

Summary

CVE-2025-25088 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the WP Keyword Monitor plugin. This issue allows an attacker to inject malicious code, specifically Stored XSS, into a user's session, threatening data integrity and confidentiality. The affected versions of WP Keyword Monitor include those from the unspecified version n/a up to 1.0.5. It is crucial for users to update their plugin to the latest version to mitigate this risk and prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.