CVE-2025-25074

Name of the Vulnerable Software and Affected Versions WP Social Stream versions 1.1 and earlier

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS in Nirmal Kumar Ram WP Social Stream.

Recommendations For WP Social Stream versions 1.1 and earlier, update to a version that fixes the CSRF vulnerability to prevent Stored XSS attacks. As a temporary workaround, consider disabling any features that may be susceptible to CSRF attacks until a patch is available. Restrict access to sensitive areas of the WP Social Stream plugin to minimize the risk of exploitation.