High · 7.1 CVE-2025-22582 EUVD-2025-2857GHSA-pmhj-4ch6-436j

WordPress Uptime Robot plugin <= 0.1.3 - CSRF to Stored XSS vulnerability

Published Jan 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Scott Nelle Product: Uptime Robot

Description

Cross-Site Request Forgery (CSRF) vulnerability in Scott Nelle Uptime Robot uptime-robot allows Stored XSS.This issue affects Uptime Robot: from n/a through <= 0.1.3.

Affected products

Vendor	Product	Affected	Fixed
Scott Nelle	Uptime Robot	≤ 0.1.3	—

References

https://patchstack.com/database/Wordpress/Plugin/uptime-robot/vulnerability/wordpress-uptime-robot-plugin-0-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry