Skip to content
OpenAdvisories

Vendor

cdowp

1 known vulnerabilities.

Products

News Publisher Autopilot 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-22557

    WordPress News Publisher Autopilot plugin <= 2.1.4 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in cdowp News Publisher Autopilot wpm-news-api allows Cross Site Request Forgery.This issue affects News Publisher Autopilot: from n/a through <= 2.1.4.

    cdowp News Publisher Autopilot