CVE-2025-1436

Name of the Vulnerable Software and Affected Versions Limit Bio WordPress plugin versions 1.0 and earlier

Description The issue concerns a lack of CSRF check when updating settings in the Limit Bio WordPress plugin, along with missing sanitization and escaping. This could allow attackers to make logged-in admins add Stored XSS payloads via a CSRF attack.

Recommendations For Limit Bio WordPress plugin version 1.0 and earlier, update to a version that includes CSRF checks and proper sanitization and escaping to prevent Stored XSS attacks. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.