CVE-2025-23662

Name of the Vulnerable Software and Affected Versions WP Panoramio versions 1.5.0 and earlier

Description The issue is related to a Cross-Site Request Forgery (CSRF) problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, potentially leading to the execution of malicious scripts stored on the server.

Recommendations For WP Panoramio versions 1.5.0 and earlier, as a temporary workaround, consider disabling any functionality that may be exploited through CSRF until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.