High · 7.1 CVE-2025-23817 EUVD-2025-3447GHSA-5wfc-hcqf-m5f6

WordPress MHR-Custom-Anti-Copy plugin <= 2.0 - CSRF to Stored Cross Site Request Forgery (CSRF) vulnerability

Published Jan 16, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: mahadirz Product: MHR-Custom-Anti-Copy

Description

Cross-Site Request Forgery (CSRF) vulnerability in mahadirz MHR-Custom-Anti-Copy mhr-custom-anti-copy allows Stored XSS.This issue affects MHR-Custom-Anti-Copy: from n/a through <= 2.0.

Affected products

Vendor	Product	Affected	Fixed
mahadirz	MHR-Custom-Anti-Copy	≤ 2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/mhr-custom-anti-copy/vulnerability/wordpress-mhr-custom-anti-copy-plugin-2-0-csrf-to-stored-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry