CVE-2025-25123
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-25123 is a newly disclosed vulnerability affecting the Easy Related Posts plugin for WordPress. This issue combines Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities. An attacker can exploit the CSRF weakness to bypass authentication and make unauthorized changes, while the Stored XSS component enables code injection through malicious user input. The vulnerability affects all versions of Easy Related Posts from n/a through 2.0.2. Users are urged to update to the latest version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.