CVE-2025-23436

Name of the Vulnerable Software and Affected Versions Wp-Scribd-List versions 1.2 and earlier

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List, which allows Stored XSS.

Recommendations For versions 1.2 and earlier, update to a version that fixes the Cross-Site Request Forgery (CSRF) vulnerability to prevent Stored XSS attacks. As a temporary workaround, consider disabling any functionality that may be exploited through CSRF until a patch is available.