Medium · 6.5 CVE-2025-25137 EUVD-2025-5645GHSA-5c9h-pc39-3279

WordPress Social Links plugin <= 1.0.11 - Stored Cross-Site Scripting vulnerability

Published Mar 3, 2025 · Updated Aug 18, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in kareemsultan Social Links social-links allows Cross Site Request Forgery.

This issue affects Social Links: from n/a through 1.0.11.

Vendor	Product	Affected	Fixed
kareemsultan	Social Links	≤ 1.0.11	—