CVE-2025-30564

Summary

CVE-2025-30564 is a newly identified vulnerability affecting the wpwox Custom Script Integration plugin. This issue permits an attacker to execute a Cross-Site Request Forgery (CSRF) attack, leading to a Stored Cross-Site Scripting (XSS) vulnerability. The vulnerability exists in the plugin from version n/a to 2.1, putting a significant number of WordPress websites at risk. Attackers can exploit this weakness to inject malicious scripts into a victim's webpage, potentially stealing sensitive information or gaining unauthorized access to user accounts. It is crucial for users to update their plugin to the latest, secure version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.