CVE-2025-30550

Summary

CVE-2025-30550 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WPShop.ru CallPhone'r. An attacker can exploit this issue to conduct Stored XSS (Cross-Site Scripting) attacks. The CSRF vulnerability exists in CallPhone'r, which is used by an unknown range, from n/a to 1.1.1. An attacker can trick a user into making a malicious request on their behalf, potentially leading to the execution of malicious scripts in a user's browser. This vulnerability poses a significant risk to users and requires urgent patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.