CVE-2025-24699

Name of the Vulnerable Software and Affected Versions: Wow-Company WP Coder versions 3.6 and earlier

Description: A Cross-Site Request Forgery (CSRF) issue allows Cross-Site Scripting (XSS). This means an attacker can trick a user into performing unintended actions on a web application, potentially leading to the execution of malicious scripts.

Recommendations: For versions 3.6 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.