High · 7.1 CVE-2025-23689 EUVD-2025-3345GHSA-j47f-v8x4-3hfq

WordPress Blogger Image Import plugin <= 2.1 - CSRF to Stored XSS vulnerability

Published Jan 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Poco Product: Blogger Image Import

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a.

Affected products

Vendor	Product	Affected	Fixed
Poco	Blogger Image Import	2.1	—

References

https://patchstack.com/database/wordpress/plugin/blogger-image-import/vulnerability/wordpress-blogger-image-import-plugin-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry