CVE-2025-28901
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 352
Summary
CVE-2025-28901 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the Naren Members page. Affecting versions 1.4.2 and below, this issue puts logged-in users at risk. The CSRF weakness allows an attacker to execute malicious actions on behalf of a victim, and in this case, it also introduces a Stored XSS (Cross-Site Scripting) threat. The Members page, specifically, is the target of this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress